Outt
Sett
Behavioral task
behavioral1
Sample
86ffe5abae6d506671ad3e042ae41c78_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86ffe5abae6d506671ad3e042ae41c78_JaffaCakes118
Size
70KB
MD5
86ffe5abae6d506671ad3e042ae41c78
SHA1
616d1e8f0a82eba87aae4a4af32225dcede0a137
SHA256
95e7c037a506b422deecef34969f472704263a104d61dcbf1e4e08c3a111606a
SHA512
ac4b2fc5a83b412b4af95453c56db6b7ef431bc67e0c59baf8856db9fadfea239e32324df29861629385e357479c9cd345089074d05c46a0d14b5adb8f24b3e3
SSDEEP
1536:mPO6KEVbsVP0glyx9Zb0NUWQEElmkdkIOqij/gTSESlCFzPKrzEt4/TqenaiJ:cMEVbsVcXZb0NX5NAFDijwrPyot2uLiJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86ffe5abae6d506671ad3e042ae41c78_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ