Outt
Sett
Behavioral task
behavioral1
Sample
8914f70f87b46b9affa393b5f49a2ef3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8914f70f87b46b9affa393b5f49a2ef3_JaffaCakes118
Size
53KB
MD5
8914f70f87b46b9affa393b5f49a2ef3
SHA1
334bd30ff7b0ad4841489d8a189cea3ebca67ab0
SHA256
1470b4806c76612eda1e29258ac46c47de5b2bb60f9c96761dabe6136710e646
SHA512
7c906ba26845390089524db673201cf526e56fb57f852b916881958748c33db2c1d1a3c2006f01e5a5b3a9f79ccf079fea717a7a13e7ebb5b63457223e8c411b
SSDEEP
768:op1VqVQwL6diO9DnPHjXfflBAb3Q3qVtLEfjH1rzm+1YC20xLU/1kFhFJ8P+nMlY:ob8Vwn/Xf0UMLKhr5xw/Q/JzMc3iS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8914f70f87b46b9affa393b5f49a2ef3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ