Outt
Sett
Behavioral task
behavioral1
Sample
88e3358d17cbb691d0ece50b55f3b4a1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
88e3358d17cbb691d0ece50b55f3b4a1_JaffaCakes118
Size
51KB
MD5
88e3358d17cbb691d0ece50b55f3b4a1
SHA1
b0ba14f5abe34d8d5ab9b8a53cc3d6715d49a500
SHA256
1b00203dc611f39f580ef82ae03bb47a6e5f0ed525cc4e538f906737a67100b8
SHA512
c84aa1c63a25cf3e7b34fdf7ed08d88a854f833bf41f77cfd6e3c7e7c9d7970c537a58c5ddb965a745fd909c737fd86ddc44645543efebd3483b3e5d1e345249
SSDEEP
1536:n7ZLNPp9pZBMkTUUu7OkQTxy6Tw+WTuaLK111QaWh+q:7ZppHTUZOpTg6T2uaLA1beH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88e3358d17cbb691d0ece50b55f3b4a1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ