Outt
Sett
Behavioral task
behavioral1
Sample
74977483479adda814b466b96205e11d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
74977483479adda814b466b96205e11d_JaffaCakes118
Size
72KB
MD5
74977483479adda814b466b96205e11d
SHA1
dc6aa501f51cdf655e078732c9dc7947ef5316d7
SHA256
6661a32f8646ebbcafa4624b497c28977d5e5fa05c5ad3038c8513abdee0c89a
SHA512
9291898e74eeb9ef7f1abf858bd7a9aedf98fa24976b8579c877cdd05f2935f4c6fc373cf7503d9b3b04448be076aa450af2d5613ae94384e82be9fe1feb2438
SSDEEP
1536:yl3E0ThXX4sGkiXzHbUWed0Bf3U/Hvf8RawzoUigB0gvQJUtoub+Cfrj:E395X4hbfV/SHvWamLPLaUt+CDj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74977483479adda814b466b96205e11d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ