Outt
Sett
Behavioral task
behavioral1
Sample
764e998d962886fd4721a60a6b752736_JaffaCakes118.dll
Resource
win7-20240708-en
Target
764e998d962886fd4721a60a6b752736_JaffaCakes118
Size
70KB
MD5
764e998d962886fd4721a60a6b752736
SHA1
0f48ac2b42a5b879521835a620554c7f6546fb04
SHA256
b3c7c03aa0d0c87fa6e6d872a66d8af025b985e70dc1c68c663cdbe669d60ef9
SHA512
d421bb33e9e86c6b323586a6671cf3010ffbdbae433be22948475e966f259322462de51936631dea307a244e9ca66086045cb8485f455d5b20891bfdff997c81
SSDEEP
768:D3g3wl5Ihwa33hvr2/q5ZCqLLLLLLLLLLLLLLLLLLLLYMJ5o8qWd6dikK+BA4rxK:jgyw3xvwf+70iU8ZYicwS2NPhn4S+Bah
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
764e998d962886fd4721a60a6b752736_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ