Outt
Sett
Behavioral task
behavioral1
Sample
74573e0ff49f6552aec3f59466753e92_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74573e0ff49f6552aec3f59466753e92_JaffaCakes118
Size
74KB
MD5
74573e0ff49f6552aec3f59466753e92
SHA1
ce8b7671670a3f47795fe60fca8d0199824956ce
SHA256
43559338b3d99737c895de3d09c065c606804a1873ad20ed27d01bdd7ff94a11
SHA512
ece046bfe6b912aaed18d033c064d7526a6e76e597a136c18cf26d8ff79d8c73bfcc9ea46fa7964cde286e8571da3dad8a03580c86b2618843314404b096c1b5
SSDEEP
1536:1zExMwCGQ2jdEQlmblhIRRFVSOz4QfdakI7KUAp7ocktXJdEoZffL:1I+wCGvpTUbla3jSOz4QfS/Ap7DkJdEK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74573e0ff49f6552aec3f59466753e92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ