Outt
Sett
Behavioral task
behavioral1
Sample
71d886e5616cd7a10ef649bf399afb56_JaffaCakes118.dll
Resource
win7-20240705-en
Target
71d886e5616cd7a10ef649bf399afb56_JaffaCakes118
Size
56KB
MD5
71d886e5616cd7a10ef649bf399afb56
SHA1
0dce1c5f44c6876d985559c349eb63aec042ddd7
SHA256
247f2c47f584a9c6cf11fac2ad40c8e097cb68bd2b0e0e866de00d7c24b60d9c
SHA512
92d55cd410a362561e3a2e603d82f0af27d1df4b766f2dd037b1812e41f1b332155682759ed20c979009df3427f8a34392dd0d38f0a2e22e0783372cf479eb1d
SSDEEP
1536:V2bYWJDN3+/ntwodBQ6Imvai8HDaBHtkA3DIhs6n45w:WYkDpW6odsmvai8H2BC0DIhsL5w
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71d886e5616cd7a10ef649bf399afb56_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ