Outt
Sett
Behavioral task
behavioral1
Sample
773c72bf3d4fa314a8d37ff0fbae6d8f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
773c72bf3d4fa314a8d37ff0fbae6d8f_JaffaCakes118
Size
62KB
MD5
773c72bf3d4fa314a8d37ff0fbae6d8f
SHA1
2d86d0bdf7a09cf6fdcb6447b147a7c98ea4b70d
SHA256
1fd8a86bd0bd7b8b36aa46f9bab94ea480187afa3905dcfeaca49385fc029e78
SHA512
f6b7d32e2b45cadc8149229c907db71a6e505b69842942e547e5da2a4db4d73cc2f2dbfe5aca439e118e93a1a599230a8563e8c9528fa2ea55b5c4849047d61c
SSDEEP
768:nbY4lDX3AqzymFz41eHT93yxkML2VlHeMoCZ3IPG8KwNr6HwUSK5Ef0hfGrs6f9Z:EGDAqzn01aT93IL2VPRIJjGHh80g596A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
773c72bf3d4fa314a8d37ff0fbae6d8f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ