Outt
Sett
Behavioral task
behavioral1
Sample
75cf01d380575ac9fa3908eec5c92507_JaffaCakes118.dll
Resource
win7-20240704-en
Target
75cf01d380575ac9fa3908eec5c92507_JaffaCakes118
Size
84KB
MD5
75cf01d380575ac9fa3908eec5c92507
SHA1
dc08dce096d8d4af422c6157bca474aa5c486917
SHA256
0fa3f1484d8e0c1f9cb9b43861c390b4ddcb785bff7e05723a660a30d93bbd39
SHA512
0d0616b480ce62edc3ad80a0048400ec8c189612bf53405b2b734f71e4fcfcbf97030ef72b1706dc2c606f6ff3c1047e73df0e2b6420e825ddb5358c612999d5
SSDEEP
1536:1zExMwCGQ2jOfZfHgog0xaLsL4zIT7C+pAbCq+RKfxbNAshd8b:1I+wCGvOHg10xaLsLQIfTp0Cq+E5brmb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75cf01d380575ac9fa3908eec5c92507_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ