Outt
Sett
Behavioral task
behavioral1
Sample
8afbb3aa3081db285e78ad5148ecf7b8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8afbb3aa3081db285e78ad5148ecf7b8_JaffaCakes118
Size
58KB
MD5
8afbb3aa3081db285e78ad5148ecf7b8
SHA1
97d09696ae12135d380aeb7dc434e49cc5102107
SHA256
8fea53c860ab5f76a9d4967c36d8eabd513ebe27e0d408242d6d5503202582e5
SHA512
2007280a0f88828dd0f4695b3b43ffe37e294d3cec6446828e97763b3e64ced6cc32b6f82ec53e81b21b5ee4110bb74c8256f9e132813bb9b80893c1f13499b8
SSDEEP
1536:RVFXW5f4qsGV3b6zhtoPxrFGG4qVw6FWherQJZCs7:T1W5fNBbgoprFGbLJxp7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8afbb3aa3081db285e78ad5148ecf7b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ