Outt
Sett
Behavioral task
behavioral1
Sample
8cc2aea0cf074266c7576f206130db4d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8cc2aea0cf074266c7576f206130db4d_JaffaCakes118
Size
72KB
MD5
8cc2aea0cf074266c7576f206130db4d
SHA1
5071530ca7e208fd280ebb263d7e5b43f7b0bfed
SHA256
8ec965c7323f85114bb050c0021b48aa48b1be8d73886e0df69fa7e9f62718d2
SHA512
25db9e7ff6583725c7802ecb12431abcc79c32be9a9ec68c91bb0ac336395d8b781d0772d867485aab7b31e5fd531226ae4d3d7eec64cf609e2cf4e9be9bc095
SSDEEP
1536:2LOJMXV6AdIX437ig8wKBBonjYPIYwMwoxo0P70XwHSOdCS4U:2rkAdIo37ix5o0A1oxocIXwHnl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cc2aea0cf074266c7576f206130db4d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ