Outt
Sett
Behavioral task
behavioral1
Sample
70c88838d20eb9ff440383b49910c818_JaffaCakes118.dll
Resource
win7-20240705-en
Target
70c88838d20eb9ff440383b49910c818_JaffaCakes118
Size
45KB
MD5
70c88838d20eb9ff440383b49910c818
SHA1
142726e27c1bcea5e4e863f4771534eb9b9ed896
SHA256
345d513910c066611b1843570a97f2127375dcf439a98b52382e216baec7af54
SHA512
ee7d6355eb9a8f0c54a10fb3396aafb64493f15a554eb73f612e67bc261d82c754e5cb9f8a4ce437a66ad195ece05adac46a610419ce80901b5c4f555a8698f5
SSDEEP
768:szM2xVV7l/Yl9qoih9zkCM/XRTWUCrDtYvBBXPWO12GqvGjl78bHWjuS:V2b0rqoijyfRTWUCrRExWO0U78b2iS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70c88838d20eb9ff440383b49910c818_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ