Outt
Sett
Behavioral task
behavioral1
Sample
8dcb8db4b100f81b44d9279d8afb2939_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8dcb8db4b100f81b44d9279d8afb2939_JaffaCakes118
Size
61KB
MD5
8dcb8db4b100f81b44d9279d8afb2939
SHA1
c6078fa79e28e2bcc995172adab141d3efc7bc18
SHA256
ece39d2d9d54323ba73188a112a291ccdedb410db41425e8d263548405e3d7b0
SHA512
bd46e06f91bca7746947964151cbfb08287a5533fdb10ac9022391f7a138ce7869c89d727bc66c97ea8f62407413558f5d02e8d2f21fc33893f306b0621e835e
SSDEEP
1536:2hq93S6xIFgQ6uNRSPMV/1EyJBLAyp2dK8lj:zr3uRSUt1E0BLsdrd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8dcb8db4b100f81b44d9279d8afb2939_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ