Outt
Sett
Behavioral task
behavioral1
Sample
72fa91f534d5a99ace9c235c33930442_JaffaCakes118.dll
Resource
win7-20240708-en
Target
72fa91f534d5a99ace9c235c33930442_JaffaCakes118
Size
62KB
MD5
72fa91f534d5a99ace9c235c33930442
SHA1
84fbf7cec7f5f93905f654b2ddcbc9a1cfff5a30
SHA256
107c2481e729ffe78f7590332bc91db849fac9cd8e3f5f4b916046195bb046af
SHA512
b56a389cc69b52fde283b718011cd92852e6f4e796e646abcdfdf640c2c4e43e7e66906cd5e2152d03a74a88497ff3a3fd62b6c0539e76fa46043daf8d47432f
SSDEEP
768:h8WTpVT0X8zbld+TTbq4jjDi/zNTS0B5eZLz3kYQNF74DnfGdcZGjrbmHkPI:RV7aO4jjDozNTS82k3NFMDnfM+GjOHV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72fa91f534d5a99ace9c235c33930442_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ