Outt
Sett
Behavioral task
behavioral1
Sample
7440e2565d6b6eee5daaa2b8c5bce1ab_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7440e2565d6b6eee5daaa2b8c5bce1ab_JaffaCakes118
Size
75KB
MD5
7440e2565d6b6eee5daaa2b8c5bce1ab
SHA1
6c7c92fe0d24cf7892aea80c139cfe8d9091de5f
SHA256
9267c24b55c4c6285855417cac37634f4b81330ea45b2dd7f9a475e5cb26d9ac
SHA512
0ea766cfb49b8444a7ac989019439e26a4db1538d9ce0164f20e9837c80823a83f4aed950e23431c085914826a469588d20281ef6c692b14fc534055e5e245c9
SSDEEP
1536:mPO6KEVbsVP0g9VAo+XP4HezIIaDzH+Q4wEmUQrjmHoo:cMEVbsVcuXJI2eQ4wEmUQ8v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7440e2565d6b6eee5daaa2b8c5bce1ab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ