Outt
Sett
Behavioral task
behavioral1
Sample
b086e670cfd3285b254ff837afdd0057_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b086e670cfd3285b254ff837afdd0057_JaffaCakes118
Size
81KB
MD5
b086e670cfd3285b254ff837afdd0057
SHA1
0ccb5f6436f683891fc46754e657d5678d7799a5
SHA256
b58fa416b175fe499429bbf556dfe350b9a4ec44e02670ab02a9986c34e657af
SHA512
3582655a82577070ccba9628d355a7b2d7ae7b9872267b9d66122b1cc1e62a64dbaec74aef59e1abb0120b60690d3ee7ec9be8783acb7b9bc35d04c82e31f9f4
SSDEEP
1536:yl3E0TldiAxYBJvdgWCxPdp9o3TnLi2VfKQejM5a32:E39xdK3lgWCJ9qTLiy6p2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b086e670cfd3285b254ff837afdd0057_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ