Outt
Sett
Behavioral task
behavioral1
Sample
7000640284bc3dc67965abe643664c22_JaffaCakes118.dll
Resource
win7-20240705-en
Target
7000640284bc3dc67965abe643664c22_JaffaCakes118
Size
48KB
MD5
7000640284bc3dc67965abe643664c22
SHA1
7eb23ba15f845ab676f84010ca15d3b4fd011b37
SHA256
5db1b73d798d180c3e3d88af9633020e79c156d3717a8414800e7c92c2b7adad
SHA512
0314f63752225fa5dfbd90103602d4ebd3970ecc23f6403c25636f195b3d03135bc490d811410f7808f38d6d7debeadc91a892fd9b5763eb503f6de8b428e7a1
SSDEEP
768:e6gzP+ViKkYrDIWIzGpuKvI9mKYSL10ogt20pHpUd7ckaVK/EoZw0/V+:e6PViKkDzGpCk5ogqUVA9n+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7000640284bc3dc67965abe643664c22_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ