Outt
Sett
Behavioral task
behavioral1
Sample
b08f8eb58cb2d0351875ebf897ebe68b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b08f8eb58cb2d0351875ebf897ebe68b_JaffaCakes118
Size
74KB
MD5
b08f8eb58cb2d0351875ebf897ebe68b
SHA1
cf1ba7002366a40c3ac6e894129b37287ba0cb43
SHA256
7ae9befd6bb80331fef7f173eeaea5fba4665b1deebc6c387f006965dfb0907e
SHA512
6a1da90fdba3fdd8d173b75a307e248d6b9d4dc9bf8b481e1bd5071cc751a67d6f71aabfe0f7386eedd6c2f5c81197a73980072a63f097fbae49024eca2342dd
SSDEEP
1536:soa1lMWi/KIIJSqxapODxW4S/93ePhyv8aFcqNhPlgG3h:SMWiibJSuapONW4S1CAvzcGAe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b08f8eb58cb2d0351875ebf897ebe68b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ