Outt
Sett
Behavioral task
behavioral1
Sample
776cf1b4a4ad9db1fcdb4568d3ef19aa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
776cf1b4a4ad9db1fcdb4568d3ef19aa_JaffaCakes118
Size
59KB
MD5
776cf1b4a4ad9db1fcdb4568d3ef19aa
SHA1
9c3e4f23b21870fc6f4dc23becc73655c665d546
SHA256
7d81838ad5f9179dd1f27708be798cfd4f01ef7f1a5258dc9ac274451eae617b
SHA512
7800bac0262b6e63c7f4842966593acd3691b64f936b78685e3d96abcc39260a2f5469dbfcb1ead70c3e8d48253c20e9696f21cd5344cab8b8f23578a6b4930b
SSDEEP
1536:mPO6KEVbsVP0gAAtOKzozoqt2OWJaFwefU/YSshbB:cMEVbsVc05CoJOlPEYjhd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
776cf1b4a4ad9db1fcdb4568d3ef19aa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ