Outt
Sett
Behavioral task
behavioral1
Sample
739527d7c466c90ce6a948a66a88135e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
739527d7c466c90ce6a948a66a88135e_JaffaCakes118
Size
70KB
MD5
739527d7c466c90ce6a948a66a88135e
SHA1
39845d76cd147163930f6288e751046fa1926262
SHA256
65022083e453b57acdfd8cd38f1ac7bd83317ff0c1d3a9eb63a30358daa3e2b9
SHA512
8c37d54202958837395b7dfbba50d9579a735b3a8f4407cdfc64a0ff557d38388665c24b686f76c13d06521e47767d72d67637b89699ad2deaf7388d68c67469
SSDEEP
1536:evuh7uS3yo5VtEVPcnxzQeH/yzYAMRfGlHa3b/v1gGxuc:71Co5D9pKzjMaHeR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
739527d7c466c90ce6a948a66a88135e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ