Outt
Sett
Behavioral task
behavioral1
Sample
89e17e4289c00606c20cf3ada8fe8433_JaffaCakes118.dll
Resource
win7-20240704-en
Target
89e17e4289c00606c20cf3ada8fe8433_JaffaCakes118
Size
57KB
MD5
89e17e4289c00606c20cf3ada8fe8433
SHA1
e3ca6607bc2c8ec94d67ac37387d9beb1f9e8677
SHA256
6f4e58d1a23b3c67bbc87f4add13e684b2a9d7965b5debf5d8e37b3426d8ee2d
SHA512
4b653bf3fcf472abb97983c1af9a290de86c8031c22d85bee36f2d11203d1b66576046a958814cd18e24be05c415f8dc100b9e337ea6c71dca48c166964e9734
SSDEEP
1536:mPO6KEVbsVP0gvn28VZdFh7CF42yoXgP8yW1:cMEVbsVcctVNsF42vzP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89e17e4289c00606c20cf3ada8fe8433_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ