Outt
Sett
Behavioral task
behavioral1
Sample
86741d811e40c6740b38ddd3d8d9e1c4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86741d811e40c6740b38ddd3d8d9e1c4_JaffaCakes118
Size
56KB
MD5
86741d811e40c6740b38ddd3d8d9e1c4
SHA1
136b593ea6de55a35efd0c011972f38f01c1fece
SHA256
6f3d3c3ddf69cc9c3e6660352a5e5fd0d8de834d1929ac7926047f21502d3183
SHA512
5a8357d7dc634920b355b183977d0ff8d907d121acd3c864e7aa099ca4361e19c14b48068aa13addd31874070e8d9b2d4a00c2e8ba615dbaebc962fcfce32761
SSDEEP
1536:Bm1NGJVGw/HpiTCtWAjfFIIRfK1iuOZXPkI4:kX0V9RiGt1tI1GsD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86741d811e40c6740b38ddd3d8d9e1c4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ