Outt
Sett
Behavioral task
behavioral1
Sample
8bfd28604f6f0c14951a180ccf4d2673_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8bfd28604f6f0c14951a180ccf4d2673_JaffaCakes118
Size
63KB
MD5
8bfd28604f6f0c14951a180ccf4d2673
SHA1
99e11fb5c20d2ed6d3c51046abae60a22e73b7cd
SHA256
83a49bfe592137e5a09a3c59f9801c0b125a5fb1b505884a07a41824fb9be36d
SHA512
2e2a7e9260254e9837b47c762d2f733f23b00edf57ad54f6597ad8fdcac9638d893341e619dfaf7de213f77368e6f76e56fc5a383c0411911aecef3763901ad1
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gT/BK8b0pVrmXHoYEv5zYQhxldkSk+tzR4RCnUKNRwm:mPO6KEVbsVP0gdx4NmYNddkyZKzM/P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8bfd28604f6f0c14951a180ccf4d2673_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ