Outt
Sett
Behavioral task
behavioral1
Sample
7763e878414273361563ae48365089f7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7763e878414273361563ae48365089f7_JaffaCakes118
Size
83KB
MD5
7763e878414273361563ae48365089f7
SHA1
8fcab98a8325f0ef313406299d6d340e8416fbf6
SHA256
f3c6fefcb400073fdad2ce708b78418971498c2fa5ecd75ff4de59c45fcb28ce
SHA512
e014af93d81b77577b2481ca1321fe6e64ddc019c64004e32faf3c12e1953e23239a35f9ef3373ee31ef32b2130e6b3963484fc5184b82bfb16e1a836a7c3c34
SSDEEP
1536:soa1lMWitUHg58bJZOfj32eUy1htcyhfO36aS8lEHU6mhvKbnWP0:SMWiEbJZOL2E1hqyhfDp8eHAhvKrB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7763e878414273361563ae48365089f7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ