Outt
Sett
Behavioral task
behavioral1
Sample
86710cbd17e7f797b0391a51fbcb4604_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86710cbd17e7f797b0391a51fbcb4604_JaffaCakes118
Size
57KB
MD5
86710cbd17e7f797b0391a51fbcb4604
SHA1
c5205d79dd66021d707f1dbaf8f90be92861491a
SHA256
79538b76399acacab835cc61394e817d66dbfff730227740b7d9d5bc355e0a61
SHA512
934270ee52c66cc84bb839d59d6126cc7a7b46a98029c9b77ffc18d62bc3a7e8eff3e1e065f59756481a747776e75dfb763a74d849b54e10173e0e4ddb9d4e67
SSDEEP
768:nbY4lfkzak9Cz2ngibRFQ4f9cpaav8664mod6r+O092euFYTBl+lMUe+776sGX5L:EG8+k97DQ+Y/8m6KXByU+wTjB0Fh48y/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86710cbd17e7f797b0391a51fbcb4604_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ