Outt
Sett
Behavioral task
behavioral1
Sample
75fbb166a06b3ab03f53ce76ac95bffd_JaffaCakes118.dll
Resource
win7-20240705-en
Target
75fbb166a06b3ab03f53ce76ac95bffd_JaffaCakes118
Size
61KB
MD5
75fbb166a06b3ab03f53ce76ac95bffd
SHA1
1d6141dc40466ff01fa9aa10d04d7bfa3684b594
SHA256
1e770dbb71066b2345a62962cec001a60c68e2278ac16d69b87c74f78f2893c3
SHA512
62ff0cca4439952def4f748764a76d6f10cd86ae1017275c657a400cb6c402bf066a802601f7d84e8a6ce155f13eb7e39b287064725e89633ff828a0e2c20202
SSDEEP
1536:APqmOCbgCVxiUyxsAzsx88P80fEuw6t/RUbki1N2SgZ:cqmACfipx6828UEmt+tO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75fbb166a06b3ab03f53ce76ac95bffd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ