Outt
Sett
Behavioral task
behavioral1
Sample
680e54ad8ac14d08eeb737364b99637d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
680e54ad8ac14d08eeb737364b99637d_JaffaCakes118
Size
68KB
MD5
680e54ad8ac14d08eeb737364b99637d
SHA1
c4cd8a4e81c323d627e22429d31ca6ca3adb6a10
SHA256
241ebd0f2c9089bd5d22815e05e03f39f98528947751b9dacc50a9aa3d1d6e7f
SHA512
fd5bdefa5bcb1322ab511c98f06672f506585b006755a78f9318b885e91cada15b2e39bd3cc1bbb56c4ace83554f3babe6561df6f046d5567a1fd090718f8757
SSDEEP
1536:Bm1NGJVGI3BzAIvC4G+L+8rr7pjVsssLXookKf1y:kX0VR3BPLrr7RVsHYoI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
680e54ad8ac14d08eeb737364b99637d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ