Outt
Sett
Behavioral task
behavioral1
Sample
710d3d709d3b674104992018888e5c61_JaffaCakes118.dll
Resource
win7-20240708-en
Target
710d3d709d3b674104992018888e5c61_JaffaCakes118
Size
70KB
MD5
710d3d709d3b674104992018888e5c61
SHA1
80fe3343565e5a659f6ba3f2bf69c72e5b50ccd7
SHA256
1a26fbc86a737355643343ec4769b6af7255d42d3ce32e0a3863c07a7f76a458
SHA512
039da4616a6aba349b150eda225b0ef0ff73cc50729989f8a1071cb55a294789ccbe95faa9045ca268d7403b52f43a9b0785a2098fd8c4ee7360403b28ff4495
SSDEEP
1536:+VZmwarcTsFMCOBINsmv/ddFwaKvkzM63Pmp1rfu+HfRc2i3n:KkwVEMCOhm3N7okzM6up5/mZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
710d3d709d3b674104992018888e5c61_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ