Outt
Sett
Behavioral task
behavioral1
Sample
8c8f226270c7323a7c8ff4f662e5e928_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8c8f226270c7323a7c8ff4f662e5e928_JaffaCakes118
Size
74KB
MD5
8c8f226270c7323a7c8ff4f662e5e928
SHA1
e5be00c2b1870e9b619fe3471391a2d26705537c
SHA256
fef23328b3a8029a6f216040e62dc62870260d152a3ff9c953b481f9cd47ae9d
SHA512
236ccf10c6a341738d6222a178f42120845117a9fab388d066857463404582fe5ac05d2aed055d56e86c69047d3847ad402f751d117315ef184a0946f2106e2d
SSDEEP
1536:yl3E0T6T+5jE6Z2GYSHWo01rT3GxmOjirVsT2Xectc:E39OyjfZiUFsTGeVsx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c8f226270c7323a7c8ff4f662e5e928_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ