Outt
Sett
Behavioral task
behavioral1
Sample
8c964599ff7e5dd1c7bdfe5f1d80a671_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8c964599ff7e5dd1c7bdfe5f1d80a671_JaffaCakes118
Size
56KB
MD5
8c964599ff7e5dd1c7bdfe5f1d80a671
SHA1
865b8f33788a0968ae49babf853631c5abc99062
SHA256
f085e7bfe886b4202951586f77d1df9416b82de84ec9de8a8a56111c500a4345
SHA512
6de39ec6059d31b4dbe2783cd2cc8d142c005e36d8f67995adaf94b4c6f96dc054121537c9f5ca4f4ae06ff4c13109f03ed8d36493e0e34b159ffb253cfec50b
SSDEEP
1536:mPO6KEVbsVP0g9ZaQ+z80SHALx+JE6GIi/cPzj+m:cMEVbsVcsj+g0MALx+JSIAWjp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c964599ff7e5dd1c7bdfe5f1d80a671_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ