Outt
Sett
Behavioral task
behavioral1
Sample
8701d7f6e361412e12c5397335bee1d2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8701d7f6e361412e12c5397335bee1d2_JaffaCakes118
Size
57KB
MD5
8701d7f6e361412e12c5397335bee1d2
SHA1
3009ee1443b0e656e977f309646b03393b2a63d7
SHA256
980745ec4b5cab2190e6043a2edaa489d8718967811d515822d130917b00fdf1
SHA512
0b4f4341d4d24bce71309db05f91b9d4600516842dc4dee096e34ae446074ac69253683c178b7eb8f79cc8585445473da8abab717ce2c8381c5bb143c2e7fb31
SSDEEP
1536:n7ZLNPp9pZBMHLkI78/BH7Cckayd0RoNverx:7ZppCX7kWc1ymoNGrx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8701d7f6e361412e12c5397335bee1d2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ