Outt
Sett
Behavioral task
behavioral1
Sample
8b214af84629277e9ba88265f7a28b3a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8b214af84629277e9ba88265f7a28b3a_JaffaCakes118
Size
60KB
MD5
8b214af84629277e9ba88265f7a28b3a
SHA1
bc2e254668477a48629e1e4a9014c7d0537d38fd
SHA256
169cfae7fa9f2f2efeffa3476a6742e16f1e11cfb00ad0f6d38bbdf48835f487
SHA512
b8c18e752cd0b00245863ea0213660da830d74e216636097f621a055862f7ab12489cfd53f97160bec42b56c3c02e899c027a76847fe5c283bc83988bd55cfe4
SSDEEP
1536:23umoMtx6qTstjiy6JzdfjbcQk8hm2ZP4f38z:CoMtx6ist+ymzdcQkkmLm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b214af84629277e9ba88265f7a28b3a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ