Outt
Sett
Behavioral task
behavioral1
Sample
761a2d9e89907ae54efb50b4ce18453b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
761a2d9e89907ae54efb50b4ce18453b_JaffaCakes118
Size
60KB
MD5
761a2d9e89907ae54efb50b4ce18453b
SHA1
890c3a647848283a5198d0a9d8040b023f84a012
SHA256
1678e21c6221d8c4e83265c5827cd9ed85219e4027b9350f06c64c9766309dc3
SHA512
55026f7a8ce51687cdcac547feb1f36ddbe1a059a0657168ef1d9c32788d8e4b3bf79f390b1c1699c54ddc6c24a728585dce5969e8468d6bc2d594022bb15479
SSDEEP
1536:Bm1NGJVGAZsTYqumHj4+idmnk2AkFD91zVKbh:kX0VrqT0mHULmBrzIbh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
761a2d9e89907ae54efb50b4ce18453b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ