Outt
Sett
Behavioral task
behavioral1
Sample
8c1fc121cbc26bbdf94b090444aa2646_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8c1fc121cbc26bbdf94b090444aa2646_JaffaCakes118
Size
54KB
MD5
8c1fc121cbc26bbdf94b090444aa2646
SHA1
6d981b2e4c68044441633b396bd4aeb63ec73b17
SHA256
311e9c05e60de7e538f9f6de7583da0e62a1bd846768164f03bc69d95c592d26
SHA512
630d8a0b682ff02d3c772f50bc41bb259561e8d2976069185c352483176ea84cf5a4ba6e4744586956cc1cf78ed03a68f5451798ca892ab35215cc6ebcf4b738
SSDEEP
768:nbY4lW6QEVwxDjpJM/6dTv0lSvgn8tAebYR95AKtjg4agPhtHLAjAsKSxH:EGW6QLJuSvHASYX5AK9gA3rW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c1fc121cbc26bbdf94b090444aa2646_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ