Outt
Sett
Behavioral task
behavioral1
Sample
878293fb6ae06e069ab7638277898789_JaffaCakes118.dll
Resource
win7-20240708-en
Target
878293fb6ae06e069ab7638277898789_JaffaCakes118
Size
61KB
MD5
878293fb6ae06e069ab7638277898789
SHA1
1b0debbd78407846604d1128da614e03d4322e09
SHA256
50e433e7591ac76454052a18d8b8b68d08a4ef13ac26e054e650323a22443753
SHA512
77ae5b8352ee3b401272ca68bc71e45df0c6d6b3fd761f379ff382a7f4b1b8c255e0d2c41f3c608b4b4bbe00cd5e4a8a5236b919106256642dcae50e3f46df52
SSDEEP
1536:2LOJMXV6Hyk/luhus1pZh1Mov1DCpmmnZOeG7n/ORL:2rkHyLJdh1XsZOH7md
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
878293fb6ae06e069ab7638277898789_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ