Outt
Sett
Behavioral task
behavioral1
Sample
74ca9244f2b9581ebc4120251c537dcf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74ca9244f2b9581ebc4120251c537dcf_JaffaCakes118
Size
55KB
MD5
74ca9244f2b9581ebc4120251c537dcf
SHA1
619b4352e83fa97f099dd25955fb1268e3c97ac7
SHA256
e512e9486cf2d3260ac9c2d7c8b8df0e77ca966b5f1f14555a8dcc8f2a8200cd
SHA512
efcea151496b6d2ebcc8f7db13bbb8ef984bf93592d021977bbe756993db9b6b395273459727908ea9f50b091e2d7e793b5305e4dc4d418bb35d5f2671bfca72
SSDEEP
1536:EGPH+osoULLkrMA+CPNe/5JNPl/RBDGJ/Kk7x:EGPH+o7UHANPNe5l/veKAx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74ca9244f2b9581ebc4120251c537dcf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ