Outt
Sett
Behavioral task
behavioral1
Sample
722803c1af39bcd0c876e9b8d5a8f610_JaffaCakes118.dll
Resource
win7-20240704-en
Target
722803c1af39bcd0c876e9b8d5a8f610_JaffaCakes118
Size
70KB
MD5
722803c1af39bcd0c876e9b8d5a8f610
SHA1
3bbdca53dbaed304c26b22378869c7b5d1292c9d
SHA256
52756d471cb4aa999a5c447482ecc8bb4daefbba443090d7ea75f49562e6637c
SHA512
144c2240fac32018678a8de39eb4d3b4542ca5e667c6c9b0501500796a14ff9b5f12c2e87fe160de4ac55594a7b36aea9d875493544e450a0a484d5a8d807b38
SSDEEP
1536:evWAGQnpEox9+0KyO0994q8rcE37+gla5koez+5Ns82QkMbe2:URXx9+9yD8qAcmSOuNB2BT2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
722803c1af39bcd0c876e9b8d5a8f610_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ