Outt
Sett
Behavioral task
behavioral1
Sample
73f755ae0a3d72580b4b32f9b6d8c1da_JaffaCakes118.dll
Resource
win7-20240708-en
Target
73f755ae0a3d72580b4b32f9b6d8c1da_JaffaCakes118
Size
67KB
MD5
73f755ae0a3d72580b4b32f9b6d8c1da
SHA1
09b938c375a5441c4588f7896ad35fc34df1d8e0
SHA256
8928c5c4e0e513106fe9ed52f0aa665b4de5c87a0ba866aadce3e109b75e6d7b
SHA512
7e85584931933db95e757b676880d0bcb9b4462c42398deca7caa71e3fe1739c785d123193021c034f3cf7469b885dfa2f291a929db9f4ad9cbf8accc2a85cb0
SSDEEP
1536:EGt86+wV54R0NFYwzUF7KEbSY7OeK4IODc4hoZSCaHg:EGq6na+MLKY7OeKzODEaA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73f755ae0a3d72580b4b32f9b6d8c1da_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ