Outt
Sett
Behavioral task
behavioral1
Sample
865884dae0bf296f90a95dbed8224faa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
865884dae0bf296f90a95dbed8224faa_JaffaCakes118
Size
67KB
MD5
865884dae0bf296f90a95dbed8224faa
SHA1
f92219f794423ef3b967c668e3004f51bfda0d82
SHA256
3fe7f60a4a987692d5cccd20c8cb757b51f78a6db333d39b10f0f088dc732711
SHA512
1c544d86a9138669f7c8ed12326e63b64cc28b3586e6b92db1b6df21791df9750432641d3a85260cd482566af5c207898f98adb05a14bff64d58b29fe8501343
SSDEEP
1536:2LOJMXV6BL16F9+87kr398k9blYZN0kYJHngWTcJSQVoZkB:2rkBL1617lcSv05hNYJboZC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
865884dae0bf296f90a95dbed8224faa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ