Outt
Sett
Behavioral task
behavioral1
Sample
c8a9d442f3d333dc5d8a2dd04f7f2c8a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c8a9d442f3d333dc5d8a2dd04f7f2c8a_JaffaCakes118
Size
67KB
MD5
c8a9d442f3d333dc5d8a2dd04f7f2c8a
SHA1
991405776bb84f7fcd191063d17aba8d71371288
SHA256
d09620e7e711b8cef509706442b1c552d6b43e180b23621a26ae2dea3848b9ea
SHA512
ed0a2a77310dc4fd2c1588c5ecdbc14d82547a5b1442c1346560053ff78d90982c59a9c1b7ab4711e91ba0ad7d9144371977eb16e32946ee73c0b01ad51dc6bf
SSDEEP
1536:QeDyJGGETAPgLxSOpybeafdREOT/NGntsFTiV:TDKG/cmxShbeafdp/NGtsFTiV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c8a9d442f3d333dc5d8a2dd04f7f2c8a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ