Outt
Sett
Behavioral task
behavioral1
Sample
758e93ceec1de98839a2264d18896b42_JaffaCakes118.dll
Resource
win7-20240708-en
Target
758e93ceec1de98839a2264d18896b42_JaffaCakes118
Size
65KB
MD5
758e93ceec1de98839a2264d18896b42
SHA1
363af089aa0c8699a906cbea4ed1ffa6090cf54f
SHA256
6824165fa0912522616d6dc0906da38e1aa38d3f4f29cfef5dd8cb95a897331d
SHA512
2f3242139a5e031a140b176fa7c648554e2d1174554d75cd9ab3b9725824a229a365d4551b2dd19599822570c04c0c3c52501c2fd82e7e65650e31524a075e9f
SSDEEP
1536:ob8Vwn/Q10AWt/2No21Xiqf62E6aF/GLmJpdfi:oz/eWt/2+2Xid2EULmJpdfi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
758e93ceec1de98839a2264d18896b42_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ