Outt
Sett
Behavioral task
behavioral1
Sample
73d6417681d699ccc52867b41bb351f1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
73d6417681d699ccc52867b41bb351f1_JaffaCakes118
Size
44KB
MD5
73d6417681d699ccc52867b41bb351f1
SHA1
1a0d1a4ebe18d0feb3b6ab4243923de07218ca1d
SHA256
e5591b4dfc0a711c1664a583cbf47b6f19f4b7d254c3b2cf301a9bf6073ee18e
SHA512
fed506e52893c2d6902e965350643214f8fcbee7697f43b18b5ea678bff806f77f7b3d2e8eb2960e95e07ad18e9635f0c38612cbda6faff75a643059e9ceabc6
SSDEEP
768:56IRmOOu54dlD1f6qGezTGW7klLyJvU/MragSgJxMic:5jRmOJ4dlD1fisTGvlyJvwVgvJc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73d6417681d699ccc52867b41bb351f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ