Outt
Sett
Behavioral task
behavioral1
Sample
878586211269494a46b2900dbe38a622_JaffaCakes118.dll
Resource
win7-20240708-en
Target
878586211269494a46b2900dbe38a622_JaffaCakes118
Size
65KB
MD5
878586211269494a46b2900dbe38a622
SHA1
37a4d8b6ba50289e63d0546598d4809656f20b04
SHA256
4ce22e9bc92f64893e5845dbceac8a443449d9630a9127146078088db0ba865f
SHA512
ef843b3cb2a14f7db4fe18f876266bec5984a2c3091e0bd0a57e9656619069d966b955281d3c5694e64da5b5620f9c85833e0677046a80acdd7561e16f4afbc8
SSDEEP
1536:1zExMwCGQ2jvsH9qnCoQYa2NnspfeqSUAR5QjogT3D/:1I+wCGvAdqCnYa2pY/SlcJL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
878586211269494a46b2900dbe38a622_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ