Outt
Sett
Behavioral task
behavioral1
Sample
86783732dcf65873493ffeb8ff06478a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
86783732dcf65873493ffeb8ff06478a_JaffaCakes118
Size
59KB
MD5
86783732dcf65873493ffeb8ff06478a
SHA1
87ee32013cc1b9ba53c1600e57b56af0190f428e
SHA256
13ce6ca6b6e914955f37c3501ca2a012828a12275ac40238a41acd8c3c44ec14
SHA512
9b9622852a93affb6aa4991147a454e328a072574037ce33b8873019232f8f4dd1ee101731a16e0d21ec04f383b15111b433a49a59bd64e55714f60ed0fb3a3c
SSDEEP
768:GbvLDaaMact8TY3kP5jJEOhI3inxQFnQrkDOWLJspyAECpIiNEGc/Fwq6CFa6Ogs:evs3k3SAxcnMkDxNspPOKcTFLOg6z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86783732dcf65873493ffeb8ff06478a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ