Outt
Sett
Behavioral task
behavioral1
Sample
7830d10d3244f56b4329108edf40208c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7830d10d3244f56b4329108edf40208c_JaffaCakes118
Size
48KB
MD5
7830d10d3244f56b4329108edf40208c
SHA1
99c3e8cfb75cbc22bd82078a3e7dc8ff876749cb
SHA256
92d4b8cc6664a9315782def4373ba625e4410a0a411d63569bd1b82c8e911c91
SHA512
5d4269c1f45894c87c9e6f1aadc22a2d52582a66aa5eaed4cc864e68c84579b4d765764bfcef996ee4b3cbbe3ff1b3344e7258a9f615d2094c2f9d42b07a2df8
SSDEEP
768:z3OHS8KOz17Qqzddn/NaMkIRWVfVjsaRWFrflhaM5HXFyghneeSKRc8/+jCs:yHZR73pd1kIROf1OxfDLVFygUKRU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7830d10d3244f56b4329108edf40208c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ