Outt
Sett
Behavioral task
behavioral1
Sample
756addaf46775a60a30f973051762af2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
756addaf46775a60a30f973051762af2_JaffaCakes118
Size
52KB
MD5
756addaf46775a60a30f973051762af2
SHA1
124a4a2a74357c7eaaddb4f8a421df167b237ff4
SHA256
d32402137663e7c4882e0353f4c51e9879f607ef57cda2d4e5bac7044fc1b8dd
SHA512
6d1adba22e0a2ebd799e3cdcd5aaaed11bb4d4c5b67752022fae7e7711a5a7b7f68941210b6838ab2d32f0bc373a3fd5fb77a383e74f09b9056aca1baa9cdfd1
SSDEEP
1536:yl3E0TvATRhevW55scHqKv5sPoRIipCx93oRKXW6Nh+:E39j5vW55sHKvCPE7pCeSc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
756addaf46775a60a30f973051762af2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ