Outt
Sett
Behavioral task
behavioral1
Sample
73b156cc9275559761ae51ccd0127c00_JaffaCakes118.dll
Resource
win7-20240705-en
Target
73b156cc9275559761ae51ccd0127c00_JaffaCakes118
Size
74KB
MD5
73b156cc9275559761ae51ccd0127c00
SHA1
969f67a8ef1c35a1a4a942ff14e8a1073bf6209c
SHA256
aa7e6eab1a9d6bd5903761d239dbd8a79a56d191e7fde18e5b7ab634a4088b94
SHA512
b2f2b2dd56828a9ef0de892fdfbe7fd4156a95155a8065f089144f5eb06b54e94ea1dbe40c8cacfc8f0f2ab7e28b48f3bc2cd4fc7a7dbbcb11d38ef8aef9a676
SSDEEP
1536:1zExMwCGQ2jExGdtrJzJVwIWxXeSAWZHyvXIOcSW0Gy6:1I+wCGvwxGdtrJzoXrA0HsX0y6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73b156cc9275559761ae51ccd0127c00_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ