Outt
Sett
Behavioral task
behavioral1
Sample
b8cd6793852d4de5e0742e7c2ca710bc_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8cd6793852d4de5e0742e7c2ca710bc_JaffaCakes118
Size
55KB
MD5
b8cd6793852d4de5e0742e7c2ca710bc
SHA1
2059e5de670aee0b8595d4902dc49602a5f4cab7
SHA256
07afa96849b59cb933c6010751171cb641e469144a045cd440d6d2637383fbfc
SHA512
20ee9b00f8535a8c1403f5300f5959a9f6af470334fff31726b708621ac3cf924730ff4537c6766569db8705560b25ac8fe94e98e6aa60c8d63a7d8c5c90b92d
SSDEEP
1536:n7ZLNPp9pZBMiYny3vLDJz8fdepMrNp0P6:7ZppcmvLV81iM5p0C
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8cd6793852d4de5e0742e7c2ca710bc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ