Outt
Sett
Behavioral task
behavioral1
Sample
70fb14e6ce72b415abd23f177f3c2314_JaffaCakes118.dll
Resource
win7-20240708-en
Target
70fb14e6ce72b415abd23f177f3c2314_JaffaCakes118
Size
59KB
MD5
70fb14e6ce72b415abd23f177f3c2314
SHA1
c8c4bf478c155c03a5c615de1519fc8bf58fc845
SHA256
0506db3ac92a0ba83dae842f83c9634bdc309ee00ee19aad62b0d529bd00923e
SHA512
a8e99480c7f54d3ef803358de928af86297b65a2d3ddb608820b93db081d86cbb9bf223d1dee8b6d2b85a79aa02dcee15c7a162e0c28a61f9de81cbe987e57c0
SSDEEP
768:yuUr3ip/IHI7NQTveYDPLPao1CZslp+g5cZNiKhKgvd7kOuYd5TdJGdVlotEYbJS:yl3E0TmwPrv0Wp+IcZIKhTdtj6d3oX6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70fb14e6ce72b415abd23f177f3c2314_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ