Outt
Sett
Behavioral task
behavioral1
Sample
7407ce7e11e040c5f6134fadb0105e66_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7407ce7e11e040c5f6134fadb0105e66_JaffaCakes118
Size
76KB
MD5
7407ce7e11e040c5f6134fadb0105e66
SHA1
2bb8fbd2e2d351e9acb9b359cf38bb8dda307289
SHA256
a070fd3281d666f6a7f6cfafdd7af5712d62c3c7ef0996be4d0dc0a6ec5be1f3
SHA512
2a52b574542d1392f667e982d823cb450c6fdb43cbfa96a20f0aa2fdc820a7a09eba6a2d793199ea96631ff9c80a388ff95ac998e0134a5c2b57f5139ea442f6
SSDEEP
1536:Bm1NGJVG5VRST7IpwrlCmcvg/FLYXzBAH+3TDVRvvc+:kX0VoST0IlV1LyAH+n7vU+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7407ce7e11e040c5f6134fadb0105e66_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ