Outt
Sett
Behavioral task
behavioral1
Sample
730a6c2f00c6e1cf4ebb41b2705d7286_JaffaCakes118.dll
Resource
win7-20240704-en
Target
730a6c2f00c6e1cf4ebb41b2705d7286_JaffaCakes118
Size
62KB
MD5
730a6c2f00c6e1cf4ebb41b2705d7286
SHA1
ba0a9f2c1b74d7ed8cc6caf8b4b34eea7517e5f6
SHA256
39d69f4cd7e7b6d443f3d520ed336275fa3090af57c421db4df964a2667ddcd4
SHA512
90379b8b48d5861eaca7cf90a01926cbb7f88ddf88baf9ec77765ea4a936c86739a75de642412866bc50f391ae22c565405c44550b906333a718e08d77c3437c
SSDEEP
1536:RVfXE6ItBdy7EH9ddq2jB+fhfA1zoOg1hSe3y:TfX+tfGy9LqcyaUL1hSe3y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
730a6c2f00c6e1cf4ebb41b2705d7286_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ