Outt
Sett
Behavioral task
behavioral1
Sample
76034a3d5785f931049fd1f5c1c62c0f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
76034a3d5785f931049fd1f5c1c62c0f_JaffaCakes118
Size
63KB
MD5
76034a3d5785f931049fd1f5c1c62c0f
SHA1
dfb2adeabf08aef8c24ed4cc7890f722a99ddbfa
SHA256
590b85dc58718da5bb906ebe145d5402c41622b787ba983fc6f80bfb034b02a7
SHA512
a46205d09a3d8327ea8d1b53bf1222a1c20fa53deb3e58ea1309bc85a1b154cfe8ebef34a92a8ac9d03d6684ccf207e28fe25e87cee7537af1ef49cb407201e3
SSDEEP
1536:+VZmwgOpqh7h/SVFWCExDizHafv3Acy6tb:KkwgOi9AWPxDizHWjB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
76034a3d5785f931049fd1f5c1c62c0f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ