Outt
Sett
Behavioral task
behavioral1
Sample
88e092b079fc6756a000b25fc86cbcce_JaffaCakes118.dll
Resource
win7-20240705-en
Target
88e092b079fc6756a000b25fc86cbcce_JaffaCakes118
Size
64KB
MD5
88e092b079fc6756a000b25fc86cbcce
SHA1
621ee970f05110e762d940a8d5f85dbe59fa8f7b
SHA256
71f694fa9dcc02829ee48e7f120a3d7d28ebc7119ec0973e99c842edecd81df4
SHA512
bb8f5857d3dd80f838186c28dca7cd62ed4b1af2849389491bfd4287b7b278c6199d79e13d7a01f85de727bd2a66f7ec25f84f3d23dec5e43ea4f1275a3a349d
SSDEEP
1536:EGhATfV9KdGz1hdzhcQQBe8rWaE1bWz4IY+6Q3:EGq9KYphdhcX/iOsBQ3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88e092b079fc6756a000b25fc86cbcce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ