Outt
Sett
Behavioral task
behavioral1
Sample
7854f2b4bb9c9764152668e18c94c7d6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
7854f2b4bb9c9764152668e18c94c7d6_JaffaCakes118
Size
63KB
MD5
7854f2b4bb9c9764152668e18c94c7d6
SHA1
d51bab6f413aafd49eaeeb0e558122de2f0cc73d
SHA256
19c1117054a77d5f23132c6def50743507becf6e61fafcc16fbf10e7e0984b4b
SHA512
282024e8da3ec15ba16d4436a5fdf69f9b0ee73623df3eb35c2abafd52af422f44a8b7c32eddcd77217aae8b553872e904081429b6645ef2388d1e518058d89d
SSDEEP
1536:GQ3tfgXK66eAtov0X3FrL8CGHMoYEMc2haw/kRQtMQHC:VfgXK66K8X3FrgUxE6aw/kRQtMQi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7854f2b4bb9c9764152668e18c94c7d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ