Outt
Sett
Behavioral task
behavioral1
Sample
773ee7f5d4f3204b9f3c4f8a99d330bb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
773ee7f5d4f3204b9f3c4f8a99d330bb_JaffaCakes118
Size
50KB
MD5
773ee7f5d4f3204b9f3c4f8a99d330bb
SHA1
93be55c3140ebafb8db4fd2f0c4bf996c8747e48
SHA256
1430a719e4a6d751e99a5487c385db0cd06367ca350d3682b390a94e3e2bf387
SHA512
7505948f731b3c41b90e2d3823596460c418b2c1bb7b2aa579b48efcfb9f3a998737eab37dd801a0a0d3363ec3ed75881aa943c722b6cd1a6fb800d50aec082b
SSDEEP
768:op1VqVQwL6diO9DnPHj2KWESu8M+nNOwTp/8SsayAWV1TlmmuIUfyn+vjO4V/FNB:ob8Vwn/213HM+nNOk8SJOpmmrUfm4V/h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
773ee7f5d4f3204b9f3c4f8a99d330bb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ