Outt
Sett
Behavioral task
behavioral1
Sample
69079205ade6706bc087de47b7640149_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69079205ade6706bc087de47b7640149_JaffaCakes118
Size
71KB
MD5
69079205ade6706bc087de47b7640149
SHA1
4c1a22051666748666d3da1ba92a4847fa8c04da
SHA256
6b9df1d2cdfc4e0ed9e29f9a7fb9a3737ed415ef5f45062cf8a98d5d44621257
SHA512
377fa4c1f903af36e40ae3e8c69574c0d8b1bff3186def3858a36f2579d76002d5672dff5e9be48a1fa26e6deddef3ca265809d08979fbd0ed85101e730c4002
SSDEEP
1536:1zExMwCGQ2jeZ9jko+hSSXEkNwR8LfhR+AtaD5UXYrY7DcKJ6LOKYB2dFD:1I+wCGvCXjko+hSSXtN/fHaDWXcYhmOO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69079205ade6706bc087de47b7640149_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ