Outt
Sett
Behavioral task
behavioral1
Sample
7706f81decd6d35a42f528c165eee0f1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7706f81decd6d35a42f528c165eee0f1_JaffaCakes118
Size
53KB
MD5
7706f81decd6d35a42f528c165eee0f1
SHA1
e837c1d5bbd226db23226cf31c14af309ea23b67
SHA256
a50b9d177bf9664f14e166750365a195a8c1ac902dfeba6ee8656bb33d5e7861
SHA512
547d5e14f3206f850c50d16156ec0d01608721baadf57eb306131d1af86aae94754bcdcefff4acd0854f06717e4a244ea06b46a1f0a8d8e873fc2eb0a473b27b
SSDEEP
1536:GQ3tfgXK70t9spozT0xgUbyinAHsskVB8NE:VfgXK70jLo+Ubyi3d62
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7706f81decd6d35a42f528c165eee0f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ