Outt
Sett
Behavioral task
behavioral1
Sample
75f264f1850aabb883bed4745ecd10ac_JaffaCakes118.dll
Resource
win7-20240708-en
Target
75f264f1850aabb883bed4745ecd10ac_JaffaCakes118
Size
62KB
MD5
75f264f1850aabb883bed4745ecd10ac
SHA1
659426c201801823089ccde5095f014f69da90e8
SHA256
6e023ba59106e066e3920f36f009f7f530da5bc1097e1484c67f27599c72a1b7
SHA512
1d244f20a6834cbbe6fd096d1c93a11131c40e3fe55c528f6adc92cc09a0324f1e48ca16ea53f4a654cc2a7ef4560c5009a9fc128a4766cd359a4a51cd757afe
SSDEEP
1536:agF0eiyUcbDgo9UXGGhZAOd7w0qpq4kxs6eBD8p:t2yF7UXfAOd7/Dxbemp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75f264f1850aabb883bed4745ecd10ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ