Outt
Sett
Behavioral task
behavioral1
Sample
8e232ced277d7d4a1657e582dd8e3de1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8e232ced277d7d4a1657e582dd8e3de1_JaffaCakes118
Size
71KB
MD5
8e232ced277d7d4a1657e582dd8e3de1
SHA1
deeef4b3867de9efb136af88b4bfc3a2bfd33948
SHA256
f450ba62e42421329b37942ac05fea03be0f97537b730388ba815f2504861495
SHA512
bde7475ade0d934c6ca0da7b52e065b8b0735cd997914572150c51476a4eda8456cd8799624bd50357c69d22449fc09a19bf12d2ce53f729a24ccd8ffd515bd6
SSDEEP
1536:yl3E0TW7UQ5wFMNwwr9GMlKYnbT8b6FdfDuPO7h:E39nQmMwwroMlKYnvUmfx7h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e232ced277d7d4a1657e582dd8e3de1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ