Outt
Sett
Behavioral task
behavioral1
Sample
737ddc0fe0e776b68c20f8ab77eb21c7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
737ddc0fe0e776b68c20f8ab77eb21c7_JaffaCakes118
Size
71KB
MD5
737ddc0fe0e776b68c20f8ab77eb21c7
SHA1
3f63d1c4f9523036e33331fb29801ad2cf654ce0
SHA256
26219f27c56964b4ca9780317aac3ec31afb04620ffc3982d0e7e0ed6d5a35fe
SHA512
b22714d7e924aa37c68a4b1675de02ca5a016ba17ec051f088d00fbb17efaf3ff5221e80db590ef1d0a4db1e440d8b3b8b819b76789d722566a7bd5c3e9f5b62
SSDEEP
1536:RVNjqibge/h7ICNi6HZEV+G5iC2wjTvvFf9AB7ihC:TxqYge/hB35EV+NwXx9AB7ihC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
737ddc0fe0e776b68c20f8ab77eb21c7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ