Outt
Sett
Behavioral task
behavioral1
Sample
69b148e687e64bf9394d6d9b76367964_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69b148e687e64bf9394d6d9b76367964_JaffaCakes118
Size
70KB
MD5
69b148e687e64bf9394d6d9b76367964
SHA1
085f92d86709c82120250652f78532dab0950783
SHA256
22d9ce6c67be9a5bc2d329026f4aad42f89238685e5b416e46667b443b9d1292
SHA512
77b3c3e49040935db1643cc5ecbb0d8fdd74804a0f952db85870511de34a61eb5ceda6d3c07254f382c72b6cfdde91e9aaa199b7243285db661e63d093bb1545
SSDEEP
1536:9fxA7JnkM7qwSHiY59I4bGuJkX3/H8MZrGIre+rfP+YJ3N:o7JkM/SHiY599VJk3Pd1rTmuN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69b148e687e64bf9394d6d9b76367964_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ