Outt
Sett
Behavioral task
behavioral1
Sample
8ccede6dd2a4278a349d6ca08b69fe72_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8ccede6dd2a4278a349d6ca08b69fe72_JaffaCakes118
Size
54KB
MD5
8ccede6dd2a4278a349d6ca08b69fe72
SHA1
ef09dcaf589326f5db49a7dace335681b1a38ca9
SHA256
a4025e4e3f6a7b2e6f7e84cadf45fd560978a66142377a89268e59a519cc594c
SHA512
aaeee1158b4a9450cd7acbc08a06e4a1f668ae6e74e2bc911590cc7fbd4b109d4a08055e4b3ad1c58d6026591646c9c5801cf91c37a5dd7cc75912fa5f138276
SSDEEP
768:YJEp5e05ZVKjpCJ5bNZW/e+VLJ/6NwVxRaVASVyElg6wwLqVT9K7Cj9js/fJ7:YJEu0nVKFCPb2UNaaLlr9YTACRSfl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ccede6dd2a4278a349d6ca08b69fe72_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ