Outt
Sett
Behavioral task
behavioral1
Sample
770ff0c0e2bdc39fcab01b91301e2d3d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
770ff0c0e2bdc39fcab01b91301e2d3d_JaffaCakes118
Size
54KB
MD5
770ff0c0e2bdc39fcab01b91301e2d3d
SHA1
776bd5f833eb4b0417ebc1872573bd6c05b4ca5d
SHA256
77cb9e53c8008e702296b613f5da149ae616e8f53b791dfce5b7c60cd458ea02
SHA512
a5fd11a4e4858c4d1907a0be9f4f251223ff0493ee60e69ef74db3e0c6e027593b424e6fc1b98aec47752f5e879fffa60e0ad6b7162affb7989da574e54e8bca
SSDEEP
1536:n7ZLNPp9pZBMjgKPzUYt2Liat88+pwAuH19grHh:7ZppMP3eiatL+pwpV9grHh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
770ff0c0e2bdc39fcab01b91301e2d3d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ