Outt
Sett
Behavioral task
behavioral1
Sample
8d22e242f075a687b8ae4fe9fb536bdd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8d22e242f075a687b8ae4fe9fb536bdd_JaffaCakes118
Size
60KB
MD5
8d22e242f075a687b8ae4fe9fb536bdd
SHA1
232568167109f217b2317692c177300a92513c09
SHA256
6548a8d8e144ccb975667810f22a43c998445c9c9c899aea6131f256624909e4
SHA512
489a27df7adddb026761b071ca730584dffaee67b00de27d8d95af4bae306958a0f0af8619136f882f2553868cd5e589dbf6e05773f4062162fe183679f5c973
SSDEEP
768:GbvLDaaMact8TzmSu6YGspGifAoI5A05NcbvSDkfGZOE60xZHL7xj8XH+aJtNI/Q:evPmuYGsMifl6CU13fx4X/JtW/V+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d22e242f075a687b8ae4fe9fb536bdd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ