Outt
Sett
Behavioral task
behavioral1
Sample
88dfb8f084e4a10b2549359567c19864_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88dfb8f084e4a10b2549359567c19864_JaffaCakes118
Size
63KB
MD5
88dfb8f084e4a10b2549359567c19864
SHA1
90a39bd98dbc43c8040db422769a2909eeb7adb0
SHA256
1dcc965a6279266211afe987eeab63ec2d98f263605de4993bc71ad9f20186de
SHA512
43643bacb051efd22dd8e0776c28c4566d3e58d2311ae6e2f80854a1b13494fb39b80df0e9d91af9c27806fc120f0cb6c8016d69992ee8871c15ba9f786d2f26
SSDEEP
1536:evODJoCM177uClYn5R1xiqOKeccOk4jxNDPcxWzINQ:0LZp414qbVjbPcPNQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88dfb8f084e4a10b2549359567c19864_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ