Outt
Sett
Behavioral task
behavioral1
Sample
88732817b4b251d3438d78daa3c6ac28_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88732817b4b251d3438d78daa3c6ac28_JaffaCakes118
Size
66KB
MD5
88732817b4b251d3438d78daa3c6ac28
SHA1
ad1c356e0e541db0659eb2ea7cbeaa85d7140af3
SHA256
602a3f2fef0b0681dc2c2a4b783de9fb40dc3ade652e85a093ca713dcb1040cc
SHA512
fbc2dbde87132fc7127f78def1790facf36836acf3772da5f8ebcd3e40f5ee4ff9bd4fbd56ed70d825ac338896ec8c501fcf566d43d8358be32ed57fc876a933
SSDEEP
1536:mPO6KEVbsVP0gXjsgtCf72Dzj1+/3gJse+sXXQ:cMEVbsVc6jXg6jAgJT+0g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88732817b4b251d3438d78daa3c6ac28_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ