Outt
Sett
Behavioral task
behavioral1
Sample
871a144c82f96bc02a7c466fb2996b65_JaffaCakes118.dll
Resource
win7-20240708-en
Target
871a144c82f96bc02a7c466fb2996b65_JaffaCakes118
Size
67KB
MD5
871a144c82f96bc02a7c466fb2996b65
SHA1
f799a3b1dd2f9ea5d2292519c92242a11de62e09
SHA256
148a9ab7d1e8517aab4fa4a8ed9864e96f05df304a8e94283981f12c8737799e
SHA512
576ff1a5cae414b03fdaad524ff2f7f2ed12077adc83aba4d70d81883f817b3d02e1b8f6ea6e2dd080f391962fc2fdf1593b431528232e0ea2cfacb0d4ee9190
SSDEEP
1536:Bm1NGJVGDd1Iu/E2AemwABaokIxQqD7PO1rX7FRgVtLY:kX0Vcxw3aokI6sTWDSE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
871a144c82f96bc02a7c466fb2996b65_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ