Outt
Sett
Behavioral task
behavioral1
Sample
8e522881aab3662ed180553d14fc4456_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8e522881aab3662ed180553d14fc4456_JaffaCakes118
Size
80KB
MD5
8e522881aab3662ed180553d14fc4456
SHA1
09ab5ef065a966dd85dea95ced07771d4a350c51
SHA256
12e8eb9b2a00db9ad00af13446386df8489bc7cb97dc8875c7b3b975b465d6bc
SHA512
5192fbe9a3f77db86423852b11a7bac90affbeb31afc551d4f2e2be5eed59e7381d5ed7266a62ddb2aad80ce3bb92d2f7f9d5069cf7aba042aee4b08b73468e3
SSDEEP
1536:HKvv9jeCw6l9n+Eu2x9kPz9nKPHtt6WMudJNsUKw3jSV/F4W6W/E:TSHu2IPJ6HGWzdJNsUKwTSVaW6kE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e522881aab3662ed180553d14fc4456_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ