Outt
Sett
Behavioral task
behavioral1
Sample
76d18e14aae73e0dac7c1d6fd387e9f8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
76d18e14aae73e0dac7c1d6fd387e9f8_JaffaCakes118
Size
50KB
MD5
76d18e14aae73e0dac7c1d6fd387e9f8
SHA1
75b2e2531bdd1b0a430b9f38e902a6c1c60534f2
SHA256
074ea527146690e817b983067f4ee6fc7a39640bedbd769e8a3ddab293204500
SHA512
527a02788077111f452710e2282d7d4092be19e9cd26edd448134100eaeb9f0b3feefeb3581d35a159bf806b9e23b426d3e36953f24793a9b005f906674afff9
SSDEEP
1536:V2bkd649BqP5OUz7wNPEj0CAEz+qTSjpqFD:Wkd649BYOCdjZ3z+qejcD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
76d18e14aae73e0dac7c1d6fd387e9f8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ