Outt
Sett
Behavioral task
behavioral1
Sample
69045eeb901ca903085c0f70633f7779_JaffaCakes118.dll
Resource
win7-20240708-en
Target
69045eeb901ca903085c0f70633f7779_JaffaCakes118
Size
71KB
MD5
69045eeb901ca903085c0f70633f7779
SHA1
c61f432e472267f6cbf09379940e506a2d8b7465
SHA256
6f8bd2e8d9369cd21d2f4d79fe2434154f21eed9d146361225f3d0612490be3e
SHA512
11b958e7262d829d5730778feee56723be339c5330380d52ba46e9ae7b502c3ae05116813b0b0d7ef8274efc2262ce54e5f36e50a7122abdebae30bc4029a32e
SSDEEP
1536:s65kuriFJLPfDQB8fHwJKwfih0LoFfSNSvqI6y0JCqc:trIJLPfEB8fHwJTfwKoF7t63CH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69045eeb901ca903085c0f70633f7779_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ