Outt
Sett
Behavioral task
behavioral1
Sample
b8dd35b70cf00b55fffbd29290b35c64_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b8dd35b70cf00b55fffbd29290b35c64_JaffaCakes118
Size
68KB
MD5
b8dd35b70cf00b55fffbd29290b35c64
SHA1
a316b86b58f94a508cecb5224240a28cab9f0258
SHA256
3eabec1adb3b4a51062329ad09f51bf0c025ce98c10ad3ae183e32cc8a1a60e9
SHA512
91adc3cd524cc24b6fd13b84201029ac639087473d0c68b5db9114de63576702a418a73c9e154df2969f64e081c7a97a750742775ea3740ecb956389e0ef26c1
SSDEEP
1536:agF0eiyUcbwpYC9Rewn/HuXyn8vXYhaaCzRVLx5bI0CaN:t2yF2/HznCohapzRVx5b1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8dd35b70cf00b55fffbd29290b35c64_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ