Outt
Sett
Behavioral task
behavioral1
Sample
719d9b3ab669de015ccbf161a1869160_JaffaCakes118.dll
Resource
win7-20240708-en
Target
719d9b3ab669de015ccbf161a1869160_JaffaCakes118
Size
71KB
MD5
719d9b3ab669de015ccbf161a1869160
SHA1
d00ed475864bb0027c1e0d1eca6fa60acbf81124
SHA256
f7162bf202c847dc3f488903e9a2ba417a6c7ab2cbad8968f1a5c348e0e66d52
SHA512
68da82e28330cb3f8c83c85322f21bfdd4b05ca3caa7739c04397f2f31722bbc8ba3d59a308f835f22e9517c3eb237ec2dd543d8da42c24bb49b4e3aad72562d
SSDEEP
768:Gx4m7JNSll3dTG+t8OovS5OEBVcj4pzZIlKZK4Gn8C5aFrYiUWwWc1kTGow90yg:Bm1NGJVGVS5OEmYC8ZMNJi9i1390yg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
719d9b3ab669de015ccbf161a1869160_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ