Outt
Sett
Behavioral task
behavioral1
Sample
757889e939d7f04b6341759c3638ccc9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
757889e939d7f04b6341759c3638ccc9_JaffaCakes118
Size
64KB
MD5
757889e939d7f04b6341759c3638ccc9
SHA1
2b2057f581e7f553270f4bfd4505aec6c051fd35
SHA256
3b282b5661f61e262da89be405d217100dfc7aa50b80b922e26496a65bac1289
SHA512
33e62541c8c8869f72fa4299b4cfba4aa8b305098cbfb68f62143d653c19a503424ea78d2ed64a476f880153e074b8cae4a20ff131dd2700468236845f45d06a
SSDEEP
1536:RVCmoh3pbLfZ8LsjIrb2fnzDEbWGTA0R0GgnVl9J9h:TWlfZdjGbRPTA7GG9Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
757889e939d7f04b6341759c3638ccc9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ