Outt
Sett
Behavioral task
behavioral1
Sample
7234cd4d0d190ebd1229fcbc1c680a61_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7234cd4d0d190ebd1229fcbc1c680a61_JaffaCakes118
Size
62KB
MD5
7234cd4d0d190ebd1229fcbc1c680a61
SHA1
4bc93f1eb3654812f18d1ce531da47ed5334863b
SHA256
80552c2c870bff44de1f36b9ca97d6d711f8b398660b6a00423df5eaa60af08c
SHA512
081c2132c0fad5f1e34a41b7cd537fc6e3986d1a3399e62ddb0eeb138c2fd9a0f79630c8a97f9ac5e91f37a8c873400e23b0cebb9ac9f2b3c2ca9915d9de4c86
SSDEEP
1536:EGYRZLZXJ4A+Vy3QurlQY8b17oFb0chPAvJF2jn:EGkNXJ4u3zeYQoFlESjn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7234cd4d0d190ebd1229fcbc1c680a61_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ