Outt
Sett
Behavioral task
behavioral1
Sample
72029daaa1a2b5d91b6365012099f3c3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
72029daaa1a2b5d91b6365012099f3c3_JaffaCakes118
Size
63KB
MD5
72029daaa1a2b5d91b6365012099f3c3
SHA1
65252042c2dd17e7c80b6c1e4e8960cde8ee08a1
SHA256
41959c4fcd778e2f0245076902c70854cee71da484eedfd7e0c8e765e735d7fb
SHA512
45d1e1ec1a6b61ef87c113edc4c95d9fe6fced12531212e5b19c826f2193770d9d8c06ed5d0ea4013acf4bd3866db444653c6d535ce3572d1280e5f3f6ea079b
SSDEEP
768:nbY4lDBP1spov2/qA1P4RP5Ilq/+SOSURFAGuAn8wdN7+9gqBnlPKYScR4bHe2+h:EGHspI4PgzIlA+8JrHZBCcq+TPd6FPMH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72029daaa1a2b5d91b6365012099f3c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ