Outt
Sett
Behavioral task
behavioral1
Sample
7474447b48275c5780cb4dc6fd70a1ac_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7474447b48275c5780cb4dc6fd70a1ac_JaffaCakes118
Size
64KB
MD5
7474447b48275c5780cb4dc6fd70a1ac
SHA1
6ca66011b3c1c2a873a5bb9ec87faba55cdb6add
SHA256
a7457f945d969b4a712cb2e54b726f763e42c2ae492d72796d8062dd0cc2cc52
SHA512
d3e1f135d102aa8fdcb367a0e7d2e01aecbdf7132b9bd4c94eacffa830a6993d9581a2604ef5f74e0c651d5b1706c2533b2861b768964e648b22bf8f1c7e0e2b
SSDEEP
768:nbY4lh34jG4wMxmTeuNtZYA05UVw0EPvGJeZiaQoRl7UFRT4QKV1AdHVQsH1jzGu:EGcM56mZa5dPvGJCioD7mB/7Q8MqtL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7474447b48275c5780cb4dc6fd70a1ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ