Outt
Sett
Behavioral task
behavioral1
Sample
69cbc38e5e24761f83f934181ba06e4a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69cbc38e5e24761f83f934181ba06e4a_JaffaCakes118
Size
71KB
MD5
69cbc38e5e24761f83f934181ba06e4a
SHA1
f885ec49aef983f4257ac90ddb5d545250d542e2
SHA256
301d383a9e94551487b812bd2cbd25b9cf1226e9219504a0f2dc079fa80762e6
SHA512
f67f7c0deb76538009dd7bd96d705a3ec1ea1c56cdb07677a61e492afc5e8a58b6e53bac03b3550bbd575e5b3425bcde1b77af061621254e9552520752d00908
SSDEEP
1536:Bm1NGJVG2NqsG6s194nPZP7f8nbgNTvexPcJEJgKIvXO2oOxp5i:kX0VrqzwrYUTvexUJEJgShcTi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69cbc38e5e24761f83f934181ba06e4a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ