Outt
Sett
Behavioral task
behavioral1
Sample
0c8670495b6672dcfc3d9c93d70bbe1c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0c8670495b6672dcfc3d9c93d70bbe1c_JaffaCakes118
Size
62KB
MD5
0c8670495b6672dcfc3d9c93d70bbe1c
SHA1
32ae22e97f4c64080f2966e9e8164e8d4cce0bd4
SHA256
e4cad6053e7b1ebe8d49cd8b97b809eeeea46c9710b02ca1e30fffbde1d8b8f8
SHA512
323069dcb4c37f0ba14151fa375a42637841fae55d1bfb53d7c0348099cc7034fae93c9f545043697529de0008695ab42750a911c5b80ef740e2e93f4c072392
SSDEEP
1536:Mq/JmJSP+rlePNpxw66FLGDQj72QaBOnja:z/JmJSP+b7BR72QKOO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c8670495b6672dcfc3d9c93d70bbe1c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ