Outt
Sett
Behavioral task
behavioral1
Sample
8c5886fcfc265fe7a39f7f7488125156_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8c5886fcfc265fe7a39f7f7488125156_JaffaCakes118
Size
70KB
MD5
8c5886fcfc265fe7a39f7f7488125156
SHA1
1dce3dee49238255d00a63afaae312b350e7881c
SHA256
c264698102ef494b66c8c5b7cd442afd1755baba93cb421cd92209f8a43e4091
SHA512
4734275ffd5268a98db32351b3298b72251c0106e6a18888587fc475b7b2082995e56045382508a570a4e202f27b452ac467b9f78c5a203d38103a2edff7ecef
SSDEEP
1536:RVC1CdMikvDLQZ+Q7d9lP8UtYLgrNRs6HD0jQvd:TynQcgd9aURrs6Ysd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c5886fcfc265fe7a39f7f7488125156_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ