Outt
Sett
Behavioral task
behavioral1
Sample
a8692bf566aa6ef436e091d8836a713a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8692bf566aa6ef436e091d8836a713a_JaffaCakes118
Size
70KB
MD5
a8692bf566aa6ef436e091d8836a713a
SHA1
21bfc1fa120879b668536442a973dc58943768c1
SHA256
cf572a6ebb2853a1580e451acb0e0cc65f31c81d471a98adfe885ff0635010f0
SHA512
139a111413d387d4be23b67f0586d843432c7f74c438d368238781c70f635b1b6419f7fb296c93876009dcef1f37ef6c42865c6cdd79af4863cf822ff8ea6747
SSDEEP
1536:1zExMwCGQ2jftaC6JbgAU78P+TevprWupkc4r3DkMdWPyeQ+tlGB87:1I+wCGvDQJbgAU78PLpl4rTkNjQQGi7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8692bf566aa6ef436e091d8836a713a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ