Outt
Sett
Behavioral task
behavioral1
Sample
70640ab40c1ebef9bcf85cc6b6d9d1d8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70640ab40c1ebef9bcf85cc6b6d9d1d8_JaffaCakes118
Size
74KB
MD5
70640ab40c1ebef9bcf85cc6b6d9d1d8
SHA1
fa21299c8c3e1fce916e72facbdf39e25978b37c
SHA256
ace69f9379a92415ca6efc761d0a852b4613c73964798fde48d8874581f0b50c
SHA512
695ad82d0a4a92ff707ac7e8b32fa40075e5a7e608880bf7d8de4a10700df26c09ae1532494b727bf7e3a5f664c98ef6c15b3f5341bd0cd9a0f26f98c6ea278f
SSDEEP
1536:yl3E0TfwzJVBod7Jp28II9eaBLPhmcYGCHw3UOMqajd95gh:E39ut8b28II9LBLPDn8YUOMqaxgh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70640ab40c1ebef9bcf85cc6b6d9d1d8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ