Outt
Sett
Behavioral task
behavioral1
Sample
b08ad6623c4dc21a92f3389b24cf11e7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b08ad6623c4dc21a92f3389b24cf11e7_JaffaCakes118
Size
59KB
MD5
b08ad6623c4dc21a92f3389b24cf11e7
SHA1
15ea636d804e60231dc8cc2600a14b4c5372dff3
SHA256
2ec507bd5ff165ae125320a540a2950db161b7376e9ac8b35e684e689e91810d
SHA512
b6da33e9385ad9c80b8efd467abc0897d1b6548979293c1989235755babc085b5d1012b5cbab12143b62a99c496845d805c6516be25e8dfa6c1c020625b90cf5
SSDEEP
768:GbvLDaaMact8TezbdKxNlVUIHJHGsEuNR2THr6Jl/cqxmMgysutjtIQwf3m6Euw8:evyKzztpHG9uL2P6JlE4gyRRIjdEpWGs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b08ad6623c4dc21a92f3389b24cf11e7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ