Outt
Sett
Behavioral task
behavioral1
Sample
787e7bd91b006551abfe904672e010be_JaffaCakes118.dll
Resource
win7-20240729-en
Target
787e7bd91b006551abfe904672e010be_JaffaCakes118
Size
68KB
MD5
787e7bd91b006551abfe904672e010be
SHA1
bd16836d59e62e0dae8d6a66e27c42065194e474
SHA256
063bbd1622b965e7ed5cd8db51174a4e9d603f2b6d2aae2204e5e8909f664829
SHA512
14df7ca6655deac9f21f854a2f19b7d45458103aedcb70de94e831c33b2e40fb0c6e8813100f64d63f4ccbb684e359d3d5cd6980c7500d1436b12fe23a936479
SSDEEP
1536:HKvv9jeCw6l9n+Eu2A08tns/FUVlMeXzNLVO4R/1msFAZGjlf:TSHu2ATmOlzzNLbS1sj1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
787e7bd91b006551abfe904672e010be_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ