Outt
Sett
Behavioral task
behavioral1
Sample
73bd14cdba72e8eff965f38e1ea17bad_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73bd14cdba72e8eff965f38e1ea17bad_JaffaCakes118
Size
60KB
MD5
73bd14cdba72e8eff965f38e1ea17bad
SHA1
e536dd37182cc09b0323d646729f28ad8eed9b6a
SHA256
9082a985d929efbdffa1188ff5aee51c1aef38e2f3f23405103247c979f80d17
SHA512
d3e0c0b8a2e617b94d4361f6c59c24d58a4e7f3bf9e52a0baa544b92ae1ef169c4f2bba113e01945868cb71eff16491b3271ac34571f00530bc4d3dabad95b39
SSDEEP
1536:uaqqc7zvZ4vy68CCgMdhZqV6VOqyEE9rdjJrANH:ufqc/tptg5V6ZEjj2NH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73bd14cdba72e8eff965f38e1ea17bad_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ