Outt
Sett
Behavioral task
behavioral1
Sample
77041cfd149c87ba1aaca2da386c5af0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
77041cfd149c87ba1aaca2da386c5af0_JaffaCakes118
Size
54KB
MD5
77041cfd149c87ba1aaca2da386c5af0
SHA1
36c39348780e117fc82e6c8940c1d3a9db17a890
SHA256
0f50d56c4419f5d91d6b77125b167a4f232bde34702f52bc8978662a766901a5
SHA512
9a7779c923f9f3a88790f0d32ea713279d89619b1cad35438bb2a3b5b779ee86e1c72cad18b80fb84f2c550d84df73ae59324341f67923877b4e6db04dc299bd
SSDEEP
1536:soa1lMWiuR5N1lCvMeyTYMvTOi8mHUMMW:SMWiu/lQMeSXvTOihgW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77041cfd149c87ba1aaca2da386c5af0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ