Outt
Sett
Behavioral task
behavioral1
Sample
74d262d3f0f8f2c7b4859408be7353dd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74d262d3f0f8f2c7b4859408be7353dd_JaffaCakes118
Size
56KB
MD5
74d262d3f0f8f2c7b4859408be7353dd
SHA1
e60bca11cc0c3ad978cb62392ac4cd279d0ec28f
SHA256
3ea5f3414a686b739a600931421bc27f20cec9449a293dec5134b057edd722cb
SHA512
c5ca28bdcd4aa8955c2ea47693ff65a922d9a97f664a15742b41d1fa71fa32b320d59cf0b8f7db1a04317cd68f4f8eb16b4818359aaf800e2c5db99a9c493612
SSDEEP
768:szM2xVVuhFYIU+hNj2qyFJwCoPxT8XN2//55W5+9qyqlkED8LE9hC0pMd/8z:V2bcD31D2qoTNNe/55WENKkymKk0pMQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74d262d3f0f8f2c7b4859408be7353dd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ