Outt
Sett
Behavioral task
behavioral1
Sample
8922fbde3840b750edc3bf0c8316d954_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8922fbde3840b750edc3bf0c8316d954_JaffaCakes118
Size
55KB
MD5
8922fbde3840b750edc3bf0c8316d954
SHA1
0bb792a9ddba1a5691c23da1905b9c83e89ad824
SHA256
bc710771be54140fd2925b8526ffa62812dabd5472444e27bb8d1357bc8b0807
SHA512
774ad429879a7ce8598bc9673f1229ac4e2699c7912be67643dc412d7ab9c5738a2f6f48173aa11f13e547dfc0711766ba94a520b431bc493af22641b756db16
SSDEEP
768:nbY4lZrt34RHINRP9nOY2DsjP2WO7zMiXxQ4/x822gwgQkNgraeJNA6OG6UgZ:EGZ+1IN7ObD0P2+ihQ4p8kmNA6l6UW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8922fbde3840b750edc3bf0c8316d954_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ