Outt
Sett
Behavioral task
behavioral1
Sample
74bd4a3db7e16b6871b5c2a6e6bf055b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
74bd4a3db7e16b6871b5c2a6e6bf055b_JaffaCakes118
Size
72KB
MD5
74bd4a3db7e16b6871b5c2a6e6bf055b
SHA1
db7f2d99965553c6a12905f88cae928a6083bc7e
SHA256
12afb4bd92f0f78139bd596c588558f23f07e92fe7f59f78b9d3b4e4ba59ecae
SHA512
44cd5e2020cc85815d061e152606b9d9bd56ee9bc35ab4bd8026be09d3a59143b29e1956ca917230e2b969b75ef8d227e65e07ee0402e1924aa7abc335289fe5
SSDEEP
1536:VZIcCxRv3ZSSx028fiT678bUWBW6P+puxUQGrX4:r+mSxd8fe66UW46P+p0UVrX4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74bd4a3db7e16b6871b5c2a6e6bf055b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ