Outt
Sett
Behavioral task
behavioral1
Sample
701b804c6cefb2185f71f37cc36072c1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
701b804c6cefb2185f71f37cc36072c1_JaffaCakes118
Size
67KB
MD5
701b804c6cefb2185f71f37cc36072c1
SHA1
2e42f33d0ce201cdf78d4e07190af3f83f2a0488
SHA256
00234f2850ed8447c5d2f604e75e969e9168ca59dc151f78d4095a45bae6232a
SHA512
bd15a8c6b80288f22036d3697d5f945bb2f63488446a72d827d235790e03c8a017cd654a4266b16a7554697f62ca89b64a327a6d0e5ca785e09ef813d5201e22
SSDEEP
1536:MhBRVgrExucM9WXYMCljJKfdjocIIl1px1FIUaNq1:cRRsrWXYL5JKJozIl1vEnN8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
701b804c6cefb2185f71f37cc36072c1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ