Outt
Sett
Behavioral task
behavioral1
Sample
86990ff9e475749301ae019be5b47d88_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86990ff9e475749301ae019be5b47d88_JaffaCakes118
Size
81KB
MD5
86990ff9e475749301ae019be5b47d88
SHA1
ae44930236cd937f7c8c4629d88b5c68c9051ba4
SHA256
8ae633ad3b5af2dcdd629bbeae3c82d58efba77b517ce1fc035957f9b6d56432
SHA512
0b2402b54f226e19fb50733b827d5ebe0973069b7d28b3f931ab00f25f52736aa1b3c4c0afc83d1c000c0eb1b1b77942b283e4ce46a9b6e6d18d655d2ee234e4
SSDEEP
1536:yl3E0T3qNbfZ/9l1MStsswEilf0IEuIqR9w6PnHqoXAAc1MT6Ms:E39sbhH1MStssaVAaw6PK0Nns
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86990ff9e475749301ae019be5b47d88_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ