Outt
Sett
Behavioral task
behavioral1
Sample
89893f615feba80380878dbc53dcb6a4_JaffaCakes118.dll
Resource
win7-20240729-en
Target
89893f615feba80380878dbc53dcb6a4_JaffaCakes118
Size
60KB
MD5
89893f615feba80380878dbc53dcb6a4
SHA1
06ae39a0432324bb58b7a8b743ec0d848ae75f73
SHA256
2eeb4262506e0f5f442c7e992471ad824a8f956a290d6c9b53cc30fa084fb9b4
SHA512
87668b68a2fff0a8819facd7a634eb9ec2cc960450d9eefbcdf51cc0916b2991172759cba104fc67a2d959e2bbe17424c473c3ba01251220809f5c3ce8768cf5
SSDEEP
1536:2LOJMXV6+QPzw43ZO30l8hGwDlGNaK3FyA:2rk+QP3k31waK3FX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89893f615feba80380878dbc53dcb6a4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ