Outt
Sett
Behavioral task
behavioral1
Sample
70ac28a762b6608f692963ae2fa818aa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70ac28a762b6608f692963ae2fa818aa_JaffaCakes118
Size
70KB
MD5
70ac28a762b6608f692963ae2fa818aa
SHA1
23056cbdd2d2825d72f6c52146271aa230cedc0a
SHA256
2ac8b1f0e5b01f7f5eb7560f3d11c4dd78488c2a54080729a83602cb2ce03edf
SHA512
8c40263f7d356f38f4d29221cc45962503a996a1831745c562100de232e1c9bb1dd8a16c9efeefe46ba9731429c12f3f89747ffd42322c28c8f19e6659e189fa
SSDEEP
1536:jZIcCxR7F99rnnPb7Ps2eOqOdWN1ul1/69V:x+FHJvZUslFA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70ac28a762b6608f692963ae2fa818aa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ