Outt
Sett
Behavioral task
behavioral1
Sample
73117b45f4f724f209718ca34647e386_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73117b45f4f724f209718ca34647e386_JaffaCakes118
Size
52KB
MD5
73117b45f4f724f209718ca34647e386
SHA1
8ad3dd7944649d70aef0382a348414de8c27b5b7
SHA256
131b75d4af26350eceda880f19b7a73a3316f07ff717b56d9c979c62e5c6d8e8
SHA512
f31506054950c17abfe88ba0a8c34384709e8d3e34dadc4a7c490001ab4174ed8c1f0744a0e12f86a9d65c7abfd722ca288acdb19856de037708b2f215320655
SSDEEP
768:d61guqcmwVeMXtL+UctJ42OgfkTJR30M7dDbAl9EKN0xPvn6FAyfBs:agF0eiyUcb4VgfkAMhIkxCBs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73117b45f4f724f209718ca34647e386_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ