Outt
Sett
Behavioral task
behavioral1
Sample
74869c6d565a4b62551583ccfc8738f1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
74869c6d565a4b62551583ccfc8738f1_JaffaCakes118
Size
68KB
MD5
74869c6d565a4b62551583ccfc8738f1
SHA1
efa34390b8077777be7ff6f6aad9e1d9ae9a6f9c
SHA256
6943c660ada88caa71fcc153b110a9482fad4831e3d8a0825ce15f94ce3caf56
SHA512
8fc43044a1986d1bb365402f6f8b228d48957703fb8350627213da736795876bbe4a20c4d133f48c79a48d874832385fee5f569e3283ae6da5167d056537a1a1
SSDEEP
1536:n7ZLNPp9pZBM24KnPDx8cC43N1ksmU8Ob//4iRre0K5nq3N:7ZppZt48N1ddD4ArenaN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74869c6d565a4b62551583ccfc8738f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ