Outt
Sett
Behavioral task
behavioral1
Sample
8d36063c0e030145569162073335b7d8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8d36063c0e030145569162073335b7d8_JaffaCakes118
Size
63KB
MD5
8d36063c0e030145569162073335b7d8
SHA1
e35601079da0282c4f23369e3252ad0dbf73617a
SHA256
54cb4c7ac2e4ce55d044cefc3cf6d817f4727da6e3d4950fca20b51d43fac1b4
SHA512
8dcd1688ef83b76dadecfc81aecc706fc445780f93d689af05f8d40ba00f0a365c5ad45ecb988796229ea8297f757a85e05e9c8c200ac57c4609bb6184117437
SSDEEP
1536:V2bKj5BL/OsZDT3W1rZyYgu3Y4++zkQBj6zXWDBhTC7xg+:WKlBisZDT3WVZyY/kiRVem+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d36063c0e030145569162073335b7d8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ