Outt
Sett
Behavioral task
behavioral1
Sample
69dd7070f7c2de5fab2cb8963aba60fa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
69dd7070f7c2de5fab2cb8963aba60fa_JaffaCakes118
Size
60KB
MD5
69dd7070f7c2de5fab2cb8963aba60fa
SHA1
230e34e2efe2b6aefa2160c8e85bca771f3358a3
SHA256
bc80d791ebbc789b57d84a657efd7b58b4d276a1fb45fe9939c9b6a5665fc793
SHA512
f4ca884ee363b23e3c69388c89c1817aefdb2b561933b44d22fbb9b3db05b6c944398006c6a30604171bd5d80ea8ac9729e14b70813f67cef259fafafabe57ac
SSDEEP
1536:EGVE5Vk2hlnSsGi3yYMrHsSJWOalrrPYFxi2/:EGVEnkM0i3yjaNrAqW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69dd7070f7c2de5fab2cb8963aba60fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ