Outt
Sett
Behavioral task
behavioral1
Sample
86b9d5dfe847195a317e02ec7b7fabe0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
86b9d5dfe847195a317e02ec7b7fabe0_JaffaCakes118
Size
60KB
MD5
86b9d5dfe847195a317e02ec7b7fabe0
SHA1
aee63683c5eb8e8f09dc3bf84ad572cf99632e74
SHA256
95b61528a8804c64209eca706788cc8d7e1aafbea3ba5708bb5822d1a8a0b2ff
SHA512
b3466c0df5ea671e9f08f2190385d47de476c67831e317d7a91c1db32fa29a391c3768b0bfb2b7259fa323e83affe6092f9030cbfe7806c98ffbf13a60213b19
SSDEEP
1536:agF0eiyUcb2CrPEfKvLp4JLsr8zckb/n1v:t2yFyCrPzvNGIr8zXDn5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86b9d5dfe847195a317e02ec7b7fabe0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ