Outt
Sett
Behavioral task
behavioral1
Sample
88855114d4b9615add5f216082cf95e1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
88855114d4b9615add5f216082cf95e1_JaffaCakes118
Size
76KB
MD5
88855114d4b9615add5f216082cf95e1
SHA1
a994f1be3d0c63b5ddf8baa0ac5831f0c23b5646
SHA256
45ecffab80943e62532f18921fb154cb982f666f439c0b736c8a2b7c29c2512c
SHA512
2bacc528c0d7ecea774dcb75f1a75e35944a984af73538d283afd7bf9d5bb90b400ce278e9938ed314115136ba04a99a9fd5885b2c1aa33330f23b9f547348e8
SSDEEP
1536:MhBRVgrExucMa7UwjMyX/0QGiQ6hpBLoHInphc7A18umqCxV2SpMoJTPHZPIbO8d:cRRsMwwYkG96XB+IssrExqkTxPIbfrJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88855114d4b9615add5f216082cf95e1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ