Outt
Sett
Behavioral task
behavioral1
Sample
888d83691e100d2c27c81633308c5261_JaffaCakes118.dll
Resource
win7-20240705-en
Target
888d83691e100d2c27c81633308c5261_JaffaCakes118
Size
61KB
MD5
888d83691e100d2c27c81633308c5261
SHA1
0c1dc66405da2e2f5dd4db8be400cee025662d11
SHA256
50da966ce6ebe70e9612e9865e9fca7216d410709a439520758165c72861c102
SHA512
2a5f83b6b6408fc060a6a8961fb117274c0a39bc9118d1f49673f1ee31385ccb21fc4b9b642a728f46ef6eab9f6abd82c80b8d9dd837d43781f3f52a3b36d5c0
SSDEEP
768:GbvLDaaMact8TSf7WXeOYJetobWMeE8E783GJi5yACkQ5RFqEL1Aar5MAwb1F74w:ev+f7sYJAwWytwRM31z+Rr4gXJcyBDF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
888d83691e100d2c27c81633308c5261_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ