Outt
Sett
Behavioral task
behavioral1
Sample
71bdb5a711de6762d7cec3edf924b25e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
71bdb5a711de6762d7cec3edf924b25e_JaffaCakes118
Size
62KB
MD5
71bdb5a711de6762d7cec3edf924b25e
SHA1
4c7233be1a1550178935659ba896fe9fdd500bb3
SHA256
1ca7d2ba699049773d7bc1bfe52716fe2c5be8791a01494cb6ae78a1a76c777d
SHA512
5354244d16f70d7f9a80154feb99bcd1bf6184320792bccffd8f83d23c5a8fb97b6fb3da3068448fa790e35be64ba6e61be2eb46430fe661486923f1effa43ed
SSDEEP
1536:Mq/JmJSPli1UP8eFBOmxsu8ObsRXxjUCD/tkUt/4Z:z/JmJSPlMU0E78dXxPD/tkI/4Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71bdb5a711de6762d7cec3edf924b25e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ