Outt
Sett
Behavioral task
behavioral1
Sample
8e5f6f2316174b3f9cc049645e734666_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8e5f6f2316174b3f9cc049645e734666_JaffaCakes118
Size
56KB
MD5
8e5f6f2316174b3f9cc049645e734666
SHA1
d7ba93084f3c812b3468f9e236781c51fbe2ac6b
SHA256
418f70b3bb121bb7ffd2508f7b9e6738cf25bac3c95b23dcd8c74ed7b0496222
SHA512
0b450185960fd56933c4fb2baa3a4c7970716a0f117893bce726ed2ff04a845e6d156595b5692a287575ef3ffa2614291ea4656cb77d5585faea2495606672fa
SSDEEP
1536:Bm1NGJVGBB6YdXGbE5/hPKZ76e0MNlC7kcD:kX0VkGbEBUdF0MKD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e5f6f2316174b3f9cc049645e734666_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ