Outt
Sett
Behavioral task
behavioral1
Sample
77d2be15dda276e7364c335e09ac197a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
77d2be15dda276e7364c335e09ac197a_JaffaCakes118
Size
74KB
MD5
77d2be15dda276e7364c335e09ac197a
SHA1
97dbb6a5f5ca3a443490d3dfc50bc5c46ca8ca6b
SHA256
1f40b9dd947479af309807556899bd5e3f60c19221138a1ff567bb4a9f47c36a
SHA512
84a49b49adcf0284f8aa98f72bda33159590f051ddc7c0f4037d4ca33c01a026d0b73adbc307c94b9a4d9b2c99ab6e4911f916377500ce78a0c4118f4cbae452
SSDEEP
1536:9s9yYTzyDv3EqRhaDfwnWL0Xyp2bf4+n+BZ977A+b6WfY:Wy1DPeDwM0Xyp2bf4++BZ5s+brw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77d2be15dda276e7364c335e09ac197a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ