Outt
Sett
Behavioral task
behavioral1
Sample
748ab583029b6b8fbc955cc7ebf9b979_JaffaCakes118.dll
Resource
win7-20240704-en
Target
748ab583029b6b8fbc955cc7ebf9b979_JaffaCakes118
Size
57KB
MD5
748ab583029b6b8fbc955cc7ebf9b979
SHA1
f20329052d55678e0a1ddee8a7f24be5bdbaa93f
SHA256
240ccc456775e4148feb518a104ee8d558bb9a9518dec9459ea2fbf1bd512a0c
SHA512
18e00217cf4418630fc700d3875d0d91641099e81969f64a7db9992ce091178b4f1fae7bbab6c39be692748b47b3ccbaede079b12cce92b10461168494a2ba79
SSDEEP
1536:EGNW36umIJZNjaayRUFK8mbDZzXnaWliBl:EGK6umMNASmb93ajBl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
748ab583029b6b8fbc955cc7ebf9b979_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ