Outt
Sett
Behavioral task
behavioral1
Sample
877656861243d92d90d715edf159f062_JaffaCakes118.dll
Resource
win7-20240705-en
Target
877656861243d92d90d715edf159f062_JaffaCakes118
Size
61KB
MD5
877656861243d92d90d715edf159f062
SHA1
2215586634d192440cb7eb0190aab66a63a14601
SHA256
2344f2c5c4108061bbad395a55b7bf0f839e2684686d085da90b27bbc5a3e325
SHA512
605ab23cd3b334835ce57f2d977945a1a5d6f6dfd1713c692a433c373ad1e9bdcc5cae5f7dd7d871ed2e61ecd459108641c59bad8b5e829eb06aeed162d638c0
SSDEEP
1536:RV78rCfQqXfVYUpC0uqB9BZErWh+uSDy/Zje4z:TIC4qXNYiT93HTSqZjbz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
877656861243d92d90d715edf159f062_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ