Outt
Sett
Behavioral task
behavioral1
Sample
b83b2413f59650508791a05327ad6806_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b83b2413f59650508791a05327ad6806_JaffaCakes118
Size
66KB
MD5
b83b2413f59650508791a05327ad6806
SHA1
09618643699f45655253f720acd25bdfb6cbcc81
SHA256
69574359437c4712d135d05347f45e0649fe58fd02959b129de9512f61423fc0
SHA512
af901191da668ac007e20e94277e761a5d9f6c1ea413572f467a8590d357413cc85732fecc10d28b0b53cd4ea56d7d7bbf38982749180fbbbd1c618cf38fb13f
SSDEEP
1536:mPO6KEVbsVP0gy+WHB9VObQTr4KdwBbUeJW72qAQP:cMEVbsVcJbhW0Tr1upU4WiO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b83b2413f59650508791a05327ad6806_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ