Outt
Sett
Behavioral task
behavioral1
Sample
c84f616819122dbcd579beb20db161b8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c84f616819122dbcd579beb20db161b8_JaffaCakes118
Size
67KB
MD5
c84f616819122dbcd579beb20db161b8
SHA1
ebde1eab4b507f6ee8a796b4255d6546351638ea
SHA256
36ded042770909e2c56883da366b84ea5e47062185f27b5c54a6d70c2e956665
SHA512
254d931c46a785e6f2ae6b2232f0be89cf216a7af51fce0f3b1b7903d0aa7c472dc55e4881bbeceb88deb071c577a47c039afc24265b430a3ac5f1ba146a8b25
SSDEEP
1536:agF0eiyUcbrmyFsEcT8TNP2dx2Ozxcgt5DiN:t2yFXmymEcYQJzrzG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c84f616819122dbcd579beb20db161b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ