Outt
Sett
Behavioral task
behavioral1
Sample
86f2d4b9110eb9e2f02e300a68e80042_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86f2d4b9110eb9e2f02e300a68e80042_JaffaCakes118
Size
56KB
MD5
86f2d4b9110eb9e2f02e300a68e80042
SHA1
7503cecfd4a8de49506f3d8bc9561445990c4b49
SHA256
1de59f2793e5037c292e55934b395b097cd47d7f43c0b1460155454ef9ef4513
SHA512
3f1d2d1c0634119b550ef68d5cc3ba6c3ce1345673612d998e697e3a40cf65fabfa9e766f03d10754f44b5c5c8ce0ba6f6f645277dee0b82572c5ff22519540f
SSDEEP
1536:mPO6KEVbsVP0gdvgwbcnAZJuFawnHypw+NZy7j2/hyLpT19sE0GCP:cMEVbsVc/wwnAZcHy6+MS/hwcGCP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86f2d4b9110eb9e2f02e300a68e80042_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ