Outt
Sett
Behavioral task
behavioral1
Sample
8ddf724273c25a999712777500d1026d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8ddf724273c25a999712777500d1026d_JaffaCakes118
Size
42KB
MD5
8ddf724273c25a999712777500d1026d
SHA1
c8ecb6d34826f34148d9ebae56cd8a10d7e5b949
SHA256
4f785c7b374faf2f8260ed94d0293e681ddcfabe097f62772002b00b89040206
SHA512
860440f23275d68ad095f606364542b64ad381b40f2ae8654de8c25d4393718e8706452381ae16bc8b6673a76f6835c8ebd4cd0da992e16caff5a83b7f3f1590
SSDEEP
768:GbvLDaaMact8TLpyxs/d07Nuvyq1ngDRNCNxLGjbGP+/6bol6x5l:evnpyxPNuBmCNxWb3/6K8j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ddf724273c25a999712777500d1026d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ