Outt
Sett
Behavioral task
behavioral1
Sample
88ce8541fe9955bed57ab444318bf2af_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88ce8541fe9955bed57ab444318bf2af_JaffaCakes118
Size
48KB
MD5
88ce8541fe9955bed57ab444318bf2af
SHA1
6ee78be562f7095c7865af3c462b92ca46c03428
SHA256
3f38bec8a24ce4b85427c7ae18010248d45cb9ea9b9196838b23669a5d8cc85c
SHA512
236ada37f31fcd43fb84047f5bf01fc666e446fdd67a02a097784602fab82ccd738cf2f1b20f885aefaec90b3345934735f29de667780d7a58d46c8cfeca3932
SSDEEP
768:GQxrhypDESkRA0HVCzXrx1K0GY89/WMFMUQqhio7NxyvtZGOTQUtnpM/2ZKTYJye:GQ3tfgXKtr/rZQqlyuOTQqp02EOye
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88ce8541fe9955bed57ab444318bf2af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ