Outt
Sett
Behavioral task
behavioral1
Sample
764a15c8fd3477666aef24ea7fe863e1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
764a15c8fd3477666aef24ea7fe863e1_JaffaCakes118
Size
68KB
MD5
764a15c8fd3477666aef24ea7fe863e1
SHA1
9c139a14556370bda62050a465d03fe00d2e2ce6
SHA256
177b9eef3c9b8db0b355a9827f359895c023a6332ba33d9fb0ee8f854f1ca11b
SHA512
30966e49693217c50d6fb7b3915cd813b6c9ff72c615f9ab1fe596b28932bde8d2d38737875cf2af2db875afcca17cb2d8fb9a78f7a7b9c0677de50d28ebdb32
SSDEEP
1536:yl3E0TXXE5XKnEPcWTN6Qvkh50wC8AEH0hfsBLmT:E39LXE56nE0WRNNfsIT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
764a15c8fd3477666aef24ea7fe863e1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ