Outt
Sett
Behavioral task
behavioral1
Sample
72df65916c2a17593148251df3b349e2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
72df65916c2a17593148251df3b349e2_JaffaCakes118
Size
59KB
MD5
72df65916c2a17593148251df3b349e2
SHA1
0e15a0070c79057b2ae87345a79f2f16c833fa9d
SHA256
1fa16c8df357fbb7939c5494932fcf36fabc6d99dec236cb1834c3c00fcce17d
SHA512
a5e6ebfdda6c523e2cff70805580477e4cd939d07ed7410297fa7ebe0b32622e566e890de8249b19754114f68c8afef1df8b177ba75452d63a7562ab4f09b712
SSDEEP
1536:mPO6KEVbsVP0gkEGV70rX/B11afmIzOkc9h/bM1XGc:cMEVbsVcpEGhOvB1glSkcQsc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72df65916c2a17593148251df3b349e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ