Outt
Sett
Behavioral task
behavioral1
Sample
7890d0a43b341ed814f37564394ad263_JaffaCakes118.dll
Resource
win7-20240729-en
Target
7890d0a43b341ed814f37564394ad263_JaffaCakes118
Size
57KB
MD5
7890d0a43b341ed814f37564394ad263
SHA1
dc8944533c949543da211b3b58feaaa961148520
SHA256
9153d2c87eb970d0b943039b60127bc1169c6511ec1b7ab9ba7390abccd4bae1
SHA512
976fe1b1e252f23d8041041314437319c09105f8f79c597f7a05ee66f6999606abc79fdb6a542a30ba464c49ba6e5d1e90f08423984d84b998544d24ec833c91
SSDEEP
1536:1zExMwCGQ2ju35OVZbC6qLcNL5cA4ucocNwqE+PCE:1I+wCGvy3gS6Ec95cA4ucoQwcaE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7890d0a43b341ed814f37564394ad263_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ