Outt
Sett
Behavioral task
behavioral1
Sample
8db5365fef898a8f70740045c86e088a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8db5365fef898a8f70740045c86e088a_JaffaCakes118
Size
76KB
MD5
8db5365fef898a8f70740045c86e088a
SHA1
54914fd7ca8bc2cc1a594fb6729adf581e700159
SHA256
67035ffa0d95395393aa5e1fa85bd6dd72e1ad7739a8379282dc7a465d2cc710
SHA512
458a637305f1b4cfd5235e4c0b94d2ac060e4e65a6a1c527911d585ad4d1f5e043ae5ad2670ea5f491e4d0b3a708546fbe0532a7766516e23fdfd98de4165398
SSDEEP
1536:HKvv9jeCw6l9n+Eu2MYux8DS5uVlpuqKXmHcnQVCKoXYYrspHuOMFf:TSHu24xUBpBKX8cnQVxobMH0V
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8db5365fef898a8f70740045c86e088a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ