Outt
Sett
Behavioral task
behavioral1
Sample
74c94ce3d63dc880d09975bb25eddefe_JaffaCakes118.dll
Resource
win7-20240705-en
Target
74c94ce3d63dc880d09975bb25eddefe_JaffaCakes118
Size
67KB
MD5
74c94ce3d63dc880d09975bb25eddefe
SHA1
e6d29c93226de7718a498fc4f27eb72772286572
SHA256
1e9f65222ddd8c049821870579d18117512a78f1ab07c3578c9c724d0d4c29b3
SHA512
fbbe125e2c2feee48dd1e09a66911689e631b81d336c993925be242918f5dcb39584e207b520d8e1a749bb4e86183c1a1d3d5bf34e69e7ee01ebac3ee40a5a05
SSDEEP
1536:RV6YSjNI8MBgDGtPlV5QkR6PkCaG8KSP5brY1VW3042qJSVZq:T6tjoBgDKPlnQ46PHaG8j9s78
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74c94ce3d63dc880d09975bb25eddefe_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ