Outt
Sett
Behavioral task
behavioral1
Sample
739b328b2b3c5f10b64ba0f2997009c2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
739b328b2b3c5f10b64ba0f2997009c2_JaffaCakes118
Size
56KB
MD5
739b328b2b3c5f10b64ba0f2997009c2
SHA1
929144a3279612be8d4b8d506b0b3b75f14ad34f
SHA256
aab461f983fa22d8f7385f9ebe0b19802f738742af5b36b1d76db5118cc98f58
SHA512
21188f60ecd28763ec877f036f45aaa222dec2563b374678b5742a66c429eb26b8dbb49cb50db038d4e047dca13939ffc8687be9ebaf0bc0930313d568616826
SSDEEP
1536:EGlxnAOywj3gEdDPMtB6Fb5XtosuLfQqfP:EGlxAajFDE6XzuLfQAP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
739b328b2b3c5f10b64ba0f2997009c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ