Outt
Sett
Behavioral task
behavioral1
Sample
86ed665c463ed1ed755bea7acb44dbf8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
86ed665c463ed1ed755bea7acb44dbf8_JaffaCakes118
Size
62KB
MD5
86ed665c463ed1ed755bea7acb44dbf8
SHA1
09c06b3cbd8be9615fbc92113f5ba88b12ea0e8d
SHA256
2b6984bf155bd9775468e837deec1452102e0122fb3b39cd63e0bd1de0e69861
SHA512
9f5618f89567fe7053f1381d9620dce45c58a237964784c6ef6c240d769d18c3866917498d50fe9ac7d2e1616c608acb38b3f0eea53f4c305470bfe48a261800
SSDEEP
768:9xBtKtqyLU3VeoQKiWP++kfj7YfLwNCPXPDThBeY9AFwpQ9EyKckdwj/W9FXRj:9ngibAjCLwNimuAWbxckk6Rj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86ed665c463ed1ed755bea7acb44dbf8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ