Outt
Sett
Behavioral task
behavioral1
Sample
88a29eeb397efa989c5f1fd8249d8731_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88a29eeb397efa989c5f1fd8249d8731_JaffaCakes118
Size
68KB
MD5
88a29eeb397efa989c5f1fd8249d8731
SHA1
5c1f176f667577bdc836bd8010d63b86d706491a
SHA256
0c7d2fe8b04d3e6024d5504c59265a72a1a1ea2386f5c4b04a0b84161c25e1d8
SHA512
9e95492987cbcfd94d05a3fd05689e07c2960582433c0fd4a23b1b3082d9adcfb381e7e979d2a68c62dd0a2c54ee48f3a5263b44d26654b0db81b5e502620a71
SSDEEP
1536:uaqqcUoQBYA1DkfFh1gWsgIk0H+vNhZVXUyWuZFjATw9UgbMxnj:ufqcPwYuUFh1gW90HMhfkyWuZFjAgUyK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88a29eeb397efa989c5f1fd8249d8731_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ