Outt
Sett
Behavioral task
behavioral1
Sample
7008ca5ffa28667dde7afed1e612acde_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7008ca5ffa28667dde7afed1e612acde_JaffaCakes118
Size
55KB
MD5
7008ca5ffa28667dde7afed1e612acde
SHA1
26364b51b0c2d9bcad670d04be3087fabd9378c4
SHA256
492146cf181cb6dabe590442727cda2d1f723659edba5ab3681ab2d94322a307
SHA512
75586f9b9c3d50e24bb87f7190103e87c38e662bf3f903164f1270d3c32512257a6f98e55ab54c6bf853ec54b32c6d81f1feae36f886bf4243c6cc033a2a3864
SSDEEP
768:GbvLDaaMact8TJlX3uoVsYHWeMthT29/AulC3NoOTs45m9i4ugeONaDke5qpJVeU:evjf6T+/AGoow493ugZNYkMLZs68Z9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7008ca5ffa28667dde7afed1e612acde_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ