Outt
Sett
Behavioral task
behavioral1
Sample
774cf7aa79e6b1e4146647904dea5dd9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
774cf7aa79e6b1e4146647904dea5dd9_JaffaCakes118
Size
81KB
MD5
774cf7aa79e6b1e4146647904dea5dd9
SHA1
6bda703149a59e78806c19026c5daef057eb0edf
SHA256
d5c285e0f50233cf590b7be3d830666456908f5675b0f569a771d8c9d7d97a91
SHA512
aed183a3a7d18ad7b6cbea198c02575aec3398f2aee647127ef4fcb4f8c70e52ced9ff7ab60a2152b303450d7aa1b012a466381024fd620b9f4cc5748adc5f48
SSDEEP
1536:agF0eiyUcbUO4wGsa2DaD4KNg1jQLgNd7XH8XyTKDJUv9H3rsp:t2yFHpa2+s5QLgPbcsK1E9Hbsp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
774cf7aa79e6b1e4146647904dea5dd9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ