Outt
Sett
Behavioral task
behavioral1
Sample
75bdd6eb225bed718fdbb89bc1c9a75b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
75bdd6eb225bed718fdbb89bc1c9a75b_JaffaCakes118
Size
71KB
MD5
75bdd6eb225bed718fdbb89bc1c9a75b
SHA1
d8e7ed05351cca902518387c7c68f5f60b44e471
SHA256
0996297d17fd8a0d3530bf61cdc06826ed74834eacdb19086c39730cf406a59f
SHA512
f91be484b67e016f8be0a600986785f15c07d6dd9aa5a7916eaaadcaa8a4802f94b1e997ee30aa9621a21f156898fd680d474c754fbe33ae8b6f18a4a308554a
SSDEEP
1536:GQ3tfgXKPl276eHYDr6TjyulJz9+ag+1ZH0L3GYl0:VfgXKN276PAjp9V1ZH0L3/l0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75bdd6eb225bed718fdbb89bc1c9a75b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ