Outt
Sett
Behavioral task
behavioral1
Sample
688e526dc6d92b79448cc953df5fea0c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
688e526dc6d92b79448cc953df5fea0c_JaffaCakes118
Size
53KB
MD5
688e526dc6d92b79448cc953df5fea0c
SHA1
891f9b0fef0b88ced573eb542b49eda91877e4c2
SHA256
74e81ae5667d75c5aa01d1b21178121694c9af05393885a78d699c1045c97aec
SHA512
d00c9cde2c49abe77091ee32ab6b8226e602f500c04c7a6661fd4c1776eba6ccc5fd254ed7b2e6525d7fd862d383f56a224d710b609a86e4c2f4a6ca41ff5445
SSDEEP
1536:anR/7XBOfQA6bd6TfQHX/+weF/FVRfuLi:aR/rwTfQqhFVRfAi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
688e526dc6d92b79448cc953df5fea0c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ