Outt
Sett
Behavioral task
behavioral1
Sample
7636297b64c2d6a9e3d077a840d3fda3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7636297b64c2d6a9e3d077a840d3fda3_JaffaCakes118
Size
65KB
MD5
7636297b64c2d6a9e3d077a840d3fda3
SHA1
1bc470e6db72fa80d7caccf2c50f02608cba1066
SHA256
1fc6e32994fed1a023d85bfb5f69090a2dd90888a6a35494675dc83932782741
SHA512
79c3e8348bc51c7b569f1b535e709703129e74ad76829ded2e6ce7348fe3bf023e20696fdcf8b7f699527c14ffae9beda158b6ccd484d81e44f890c41d9d5ee2
SSDEEP
1536:GQ3tfgXK/ZHeYUIfG21q8nGx7XjBkd9Dbynb1qnNENT:VfgXKAjbeG5zE92qNq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7636297b64c2d6a9e3d077a840d3fda3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ