Outt
Sett
Behavioral task
behavioral1
Sample
782238edd76c37afd57dac31eb818c1b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
782238edd76c37afd57dac31eb818c1b_JaffaCakes118
Size
63KB
MD5
782238edd76c37afd57dac31eb818c1b
SHA1
4173284ba7d92cd4698f7d0679891df2543a38ce
SHA256
bbe89c8d50234ff535ad6a37d0427a1a0a9853c8de2f0d2c84aadacdc622a2d6
SHA512
4844fe109e508bfa302ad44ee9a94938fd2b3a332c223f66a25a85eac5eb6098bd0a435c62ed2d65e0eeb28809639e644484b42835b564842214cc5c488576ba
SSDEEP
1536:2LOJMXV63rIp/H0dCfkmD75ylh4kUJfubED/4AniSV+i:2rk3rIdHEMbyWkAfTD4AX+i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
782238edd76c37afd57dac31eb818c1b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ