Outt
Sett
Behavioral task
behavioral1
Sample
734e928cc040f7a2c3acd29b1a369c5f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
734e928cc040f7a2c3acd29b1a369c5f_JaffaCakes118
Size
53KB
MD5
734e928cc040f7a2c3acd29b1a369c5f
SHA1
c3ccdd56159f40bc521fb6f5f8fdb22c1500783a
SHA256
af33e84e3dd7520b08b60a97452963da64cac3cac10398c4a4be57ea20a04eaa
SHA512
cbd22acc31e4eac43a0e2d0b0d2cb077a0dfb375cad45415717b85272b84b54406524be2508382e91dfbd510025ba3f9d5673bd01040ac866a206a8f7d4ddca0
SSDEEP
768:nbY4lXSDCKttFo80y1kKdLANa0312YJsQds529OCg4wXZK9GX9eEuNpBMFZ:EGmjtP07SqBbcoOCYXZK9GNtuFMX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
734e928cc040f7a2c3acd29b1a369c5f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ