Outt
Sett
Behavioral task
behavioral1
Sample
680fcc65435104a2a39fb4a8e58673fe_JaffaCakes118.dll
Resource
win7-20240705-en
Target
680fcc65435104a2a39fb4a8e58673fe_JaffaCakes118
Size
75KB
MD5
680fcc65435104a2a39fb4a8e58673fe
SHA1
75c2cd1b8164857fa6359b01d3341857a0c3c096
SHA256
3fc3dd4ff705c71e6953c0fe82050c8ca79cb18a92d5f77559ffb104e154b985
SHA512
ac611409e216408b04bc7e4e56c057fc9adbb37c7bf71056392b58fc6d4d36fec64a0ff9b08131c2c40a547ab0f4cd04307112db6e4f927892ebc38fa16844af
SSDEEP
1536:Bm1NGJVG9E6+XRFdqUY00EnxfiFBDpHJwAsNbn:kX0VMEF7MUWEngFBQt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
680fcc65435104a2a39fb4a8e58673fe_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ