Outt
Sett
Behavioral task
behavioral1
Sample
75a528eb4c268f85c00c4cb9a2cd803a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
75a528eb4c268f85c00c4cb9a2cd803a_JaffaCakes118
Size
55KB
MD5
75a528eb4c268f85c00c4cb9a2cd803a
SHA1
87dc43a5be705a8574ef5e85fbab4c2a50578679
SHA256
ac27c6a357bc15aefe8957335f8fd42c26fd5373a3ecf938c65256786ee413aa
SHA512
844f5a4b992b90a537bff8da18e9b556d2d5366e710f1ca072d891cc9d5b72a8cd72ddb90884b93510d0d9ab0ee716300ad4fdab337c5920c2d9f97f1dd755e1
SSDEEP
1536:n7ZLNPp9pZBMp3xIRjt2XHMKNd8Vi9F7Wc6+L:7ZppOIQHzNd8VinH6a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75a528eb4c268f85c00c4cb9a2cd803a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ