Outt
Sett
Behavioral task
behavioral1
Sample
184623d2fe64df0640e5bdd1132b50ac_JaffaCakes118.dll
Resource
win7-20240903-en
Target
184623d2fe64df0640e5bdd1132b50ac_JaffaCakes118
Size
61KB
MD5
184623d2fe64df0640e5bdd1132b50ac
SHA1
7eabaaee0d4b7b74375cb3ea48110d65802d086b
SHA256
bfceeafb8c3001e5a0cc5a1de59acd9f1f967c21964089c08d72874afa8f82c0
SHA512
478fb7328039b99db6be0db55220d020f52d2914dc677628f5d5e2644a2e13ab055c59a6b3a32c2ce97a9549e94269adbaee61cab77af36d69fe2da3b21b2b8e
SSDEEP
1536:Y7BstH774LDvFcWRwk0aeZLlZdv5gAWsmFWF1mC:wBG7mwk0aGZTgAtxF1h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
184623d2fe64df0640e5bdd1132b50ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ