Outt
Sett
Behavioral task
behavioral1
Sample
89585f225618dd12850516dd1bb8a57f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
89585f225618dd12850516dd1bb8a57f_JaffaCakes118
Size
67KB
MD5
89585f225618dd12850516dd1bb8a57f
SHA1
68b5556f74fb7ebb85fc15cc08f0e4f7938f46f2
SHA256
2756f9f930cc021438a26a9a9af82cfa1d79ee21bd57dafcf80547d4b16beefe
SHA512
e2f42b8c7a159530bb743c100b89aa89ecab307cfb1c409fca148596fa6935e12e1c85d9da8d1b32e507d92a2a59b947c87e5d710d7da65aaca869f4adfa609c
SSDEEP
1536:EG/4BSNO7Z/iyF9OV1/e3aeSAL7DdGS07SSN4At7P:EGFO7ZDkV1/e3G+C7d/t7P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89585f225618dd12850516dd1bb8a57f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ