Outt
Sett
Behavioral task
behavioral1
Sample
70b9b608f72a91b91e48aad22a9ca653_JaffaCakes118.dll
Resource
win7-20240705-en
Target
70b9b608f72a91b91e48aad22a9ca653_JaffaCakes118
Size
87KB
MD5
70b9b608f72a91b91e48aad22a9ca653
SHA1
9fe3d614002e87a4f1f58bd439aaa9f3a2ff6632
SHA256
550beb5645b1c0bcec7701fd13c0e5a9992b5ce24a40642bfac7de2ab75120f0
SHA512
0e5f7e9fbfda09ecec573f05ba3d57a8b04908ce5b047761eafe28135db5d9db623975af63a8fda4fb5e429eaaa2f9c6a535147124f391aac3d21bfd3c09ebff
SSDEEP
1536:RVdMdnx/XDh0csfg+TQ/gai79QTtckdmLQNQ/zDL7ZgevE6gFL:TdGJXlqgF7iJQTq5zDtBML
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70b9b608f72a91b91e48aad22a9ca653_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ