Outt
Sett
Behavioral task
behavioral1
Sample
8cff57f28c6f68229d5f60acfed44f9f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8cff57f28c6f68229d5f60acfed44f9f_JaffaCakes118
Size
87KB
MD5
8cff57f28c6f68229d5f60acfed44f9f
SHA1
cb404bbaa5f3a0ef28fe7ba53b0012881af3e58c
SHA256
4c4610da26ce058cc2d30a4d8e0a102ce626a774642accf06a804ef945bdb701
SHA512
2d08a25b7cb86232e4a9538d23a0712561d74079f0662284118fa000d03ddabca636d2b3c9d8f36c6bf1b1ce916a447f0bf06828319c8308bcb560481c358093
SSDEEP
1536:Bm1NGJVGWzeZYqPXhPhsNik8I8fha2BRY2mYCNS4mPWmRFmWg4d:kX0VTCZ1H0ik8I857BRYlYBtW8Fd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cff57f28c6f68229d5f60acfed44f9f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ