Outt
Sett
Behavioral task
behavioral1
Sample
77a3d153944a5944c05dc8472c9f40a2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
77a3d153944a5944c05dc8472c9f40a2_JaffaCakes118
Size
60KB
MD5
77a3d153944a5944c05dc8472c9f40a2
SHA1
2cf2146ef9d6d14a6c82bf58b8be60348a871ee7
SHA256
0e7465c38a3cf684cd153a592764e488539be5168eecf4802486d19974823d7e
SHA512
7efce71d7b3f0a3ad8958af786b65a69782dcc11e23502009fb6353c400d3d76c5ea798a171b7a9f0bbf063ab3eb05a696dbf44138d6a8c1fa9a58e5d6b94549
SSDEEP
1536:V8O9Nn6RjriaHfN2rdOCb/NTMecmyGU9JzUrqLx9p3:2Oz6VWK1QlJTMLm1HqLx9p3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77a3d153944a5944c05dc8472c9f40a2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ