Outt
Sett
Behavioral task
behavioral1
Sample
8b7c1de38a32ac126cfa9acd88c86808_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8b7c1de38a32ac126cfa9acd88c86808_JaffaCakes118
Size
74KB
MD5
8b7c1de38a32ac126cfa9acd88c86808
SHA1
d2409d667c20fbb88efc1b7ddad9af017290a2cb
SHA256
35a04a8c8cb66a98c6dbea00815dbfea340ce705de16e16f15603afff84061f6
SHA512
fc2f7c396a3ea3a282e8e6e22bfc699fab1ef8ab4da9f8a33a1dc5ca82ea19b6bea4f5280ec445736bedc5ca54e1142f233865a4c28e749dc13457b8bc46910a
SSDEEP
1536:EGs0iugCwj1LeV3lGpfSmh36P0CTW9Gzn3HYMpbWIgBXDP6Dc0:EGsbfLezGZfZCTWgNgJY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b7c1de38a32ac126cfa9acd88c86808_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ