Outt
Sett
Behavioral task
behavioral1
Sample
786f89a3fba4e85b00085bc236658483_JaffaCakes118.dll
Resource
win7-20240704-en
Target
786f89a3fba4e85b00085bc236658483_JaffaCakes118
Size
67KB
MD5
786f89a3fba4e85b00085bc236658483
SHA1
96ae576a51d73d8341b0ac14539b47f9253555da
SHA256
13dbc3de25fb4c7d187178a89335baf4aadc21d2c95d57d78101049d8781bbfd
SHA512
973bd1af2e0065ece80896c9f8f39873c83fbd4612674bda0789187dc831281eaeaf08e363988cd4605b58a9d9098cc3a226145b5b5746b5522ccd078342f82d
SSDEEP
1536:yl3E0T5enIyccwJtqZi/VUPGL2q7kwOLtd6pCsRF:E39FenNnoAZtPGL2rwcmpCY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
786f89a3fba4e85b00085bc236658483_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ