Outt
Sett
Behavioral task
behavioral1
Sample
8641d94db2223212e39b9047f1359c1d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8641d94db2223212e39b9047f1359c1d_JaffaCakes118
Size
64KB
MD5
8641d94db2223212e39b9047f1359c1d
SHA1
1ed013267c632d528ad9aca1b56fb9257b56f958
SHA256
27ef5d79bdf9ddf66f0d7b834d8120deb2326373967af23c5a0ffd564ef6a285
SHA512
0eb9b0b3d0210f73b8dfbaeb6635afa188f9a763a03610cdd102453575d969391f063ec3a79cf01756ef8d4ab487261be2048476c93838d75034455dec81b8ed
SSDEEP
1536:V2bTpLd6DLgtipaqHNAofDYFHSvI4oUJEAQO4cjd:WFLOLgtkxtAof8FHSAtNbcjd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8641d94db2223212e39b9047f1359c1d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ