Outt
Sett
Behavioral task
behavioral1
Sample
700f6b7e81bef7d7b950d5d007f88944_JaffaCakes118.dll
Resource
win7-20240705-en
Target
700f6b7e81bef7d7b950d5d007f88944_JaffaCakes118
Size
75KB
MD5
700f6b7e81bef7d7b950d5d007f88944
SHA1
496bdd12618a1b91390ba3a9660e2b7a5934750f
SHA256
252b2ba1820ef38e94cdc089575b7d3e062bc05fe3a0756364656c7ebce26270
SHA512
b44ae614fecb04f10a898dfe044c184d67103c75e65ee2eecf822c3412d7d9b6696ed154ad800803cb8f57d245e27a0e02006390ae37960ac904b7bb850d57ff
SSDEEP
768:h8WTpVT0X8zbT66miAbrgN3w82/BaUbVcUOnyetbid2yqkf+10Cggbmf8cTARiIC:RVK6ZAbx8MzGU34yTSutDARDOVADiz9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
700f6b7e81bef7d7b950d5d007f88944_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ