Outt
Sett
Behavioral task
behavioral1
Sample
7589da65ab71e4759505614753f2fc52_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7589da65ab71e4759505614753f2fc52_JaffaCakes118
Size
68KB
MD5
7589da65ab71e4759505614753f2fc52
SHA1
2e7f84e3d5049ab2677d7444c3a3632b2ea622c3
SHA256
0bdae63d027d33690a2ea89207e71212e87359ebaf7a38e2bef40f543ba5df27
SHA512
8a4b2a0a45fb5d8a1e198cf4b840c591a7a57a6560591fa28a7358746ae25ebc8d129eecf6316c74bd6677174792dc52e72c07df8483202b20651a20ff5e7f9a
SSDEEP
1536:EG4dBFHuTwtg5qxfK/oMFBdCF7uL1UyEeQgvzeD330zb3psyjfg:EG0FOstg5qxy/FnEFkay3j6D30syjY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7589da65ab71e4759505614753f2fc52_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ