Outt
Sett
Behavioral task
behavioral1
Sample
764aabfb6125cf9970185afa07c27d69_JaffaCakes118.dll
Resource
win7-20240708-en
Target
764aabfb6125cf9970185afa07c27d69_JaffaCakes118
Size
66KB
MD5
764aabfb6125cf9970185afa07c27d69
SHA1
7c2cba5dac2bde4ca303dbe32a80c3c32736a129
SHA256
9233b933fd7c93095466f884d1133c6b81533d3cb6b1b3a3e3aff856e88eccb1
SHA512
e56e9d237257cabb01fa60d17ba82a520acb7c2989d67587f51c32b3e550abf8b1515d3349b0b56dfd7e74c2d264cfe6afe08d10ff2f0d6181b1de9151d13000
SSDEEP
1536:mPO6KEVbsVP0gCFhWP+iIx+6MHwvEw4dpBHRp3c34wT4:cMEVbsVc9wLIxl8Bxp3X64
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
764aabfb6125cf9970185afa07c27d69_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ