Outt
Sett
Behavioral task
behavioral1
Sample
b81ea87b1081e80d6eff685c82753bbf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b81ea87b1081e80d6eff685c82753bbf_JaffaCakes118
Size
58KB
MD5
b81ea87b1081e80d6eff685c82753bbf
SHA1
4df2d69517fd4f6a96d32b6f272e72bc7c875c16
SHA256
4fb612c7357cb35bccdf89b7f078f0673741481611a4a073fdf02f9dd0815d25
SHA512
f98dc23e629d3df06aefb5a158f0962042d2a3eadbb93b87beaefe9a7bbcc31b6ca915b9077d7f84d0195a47d2d61a441fd8ee48a5a9ad5ef71de9052bb04452
SSDEEP
768:nbY4lnkYhF1H3bYF4zrtVA7n+JI0XSELg3DvlIujW+lWX3+xsG:EG5FBrYydVkaSxU+lk3+uG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b81ea87b1081e80d6eff685c82753bbf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ