Outt
Sett
Behavioral task
behavioral1
Sample
b864c82facd83e8155326bf626c5d438_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b864c82facd83e8155326bf626c5d438_JaffaCakes118
Size
53KB
MD5
b864c82facd83e8155326bf626c5d438
SHA1
5a4f5b267e05793d17a0ca9386166f8c89722d2d
SHA256
2f81998b6e26a7f50ba48bd06e541e21f18667f29f7203e22a41dd7f09142d4c
SHA512
d35478471f1d7a40a95c2ce326e26e226c5bb861ccc2a800c05d8c65a2c7a8ec22366749e0aff6fc83ca50ea0fea1e2d801316f1a0dfb0bbefdd9adba26946e5
SSDEEP
1536:kjRUrGeQP7HSEychOy6kp5BFuirR+7tXvJ:kFwUPGwB7BxrRo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b864c82facd83e8155326bf626c5d438_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ