Outt
Sett
Behavioral task
behavioral1
Sample
866a8e396aaa2a51a8ffcbcda08774d0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
866a8e396aaa2a51a8ffcbcda08774d0_JaffaCakes118
Size
57KB
MD5
866a8e396aaa2a51a8ffcbcda08774d0
SHA1
055ad3b0f5c17c908965041f3af8fffe09347ae5
SHA256
a1a90bd9c46bd76c1dc1846afb84465bc73058d3c630187a360f8c8571e4c498
SHA512
1eef9fb33b5b7ea24ec41c2f26a7fb9df9c2f82d7e6f39465673320d3673756014b2122dbc90ef82a919702fd65dbbf5c517dc298c769529b0fc49bbd7d4707a
SSDEEP
1536:tyM8Fat5T1awZzwcStBUroJbviL1/EOecif/sD:EMWw1aE0canMLRG/2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
866a8e396aaa2a51a8ffcbcda08774d0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ