Outt
Sett
Behavioral task
behavioral1
Sample
8cf319e49bf7999fd97fe389cd1ffcca_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8cf319e49bf7999fd97fe389cd1ffcca_JaffaCakes118
Size
73KB
MD5
8cf319e49bf7999fd97fe389cd1ffcca
SHA1
8765ba4b8df47181bc7da815d356005ea6014af9
SHA256
0783749066b9b9c41ea58936b592f39476bc3e2723eca56e1f93d108e37b2f03
SHA512
54d3697f7a548e2c8097636709725e940c8e87e86109384db49cd420fedf262fcbf4e48abeda4ca6dae128fc5235438734530a27d1e08e5c4360eb718adc9cf5
SSDEEP
1536:EG97UL3h8FxvSo21JK4MvPvqnfFpg/O63uAn0EgSgKKvb8ot/:EG97ULGFx6ooJtMPGFe/z3qSS8ot/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cf319e49bf7999fd97fe389cd1ffcca_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ