Outt
Sett
Behavioral task
behavioral1
Sample
79247d4769e68facb113f6f1d5daccbb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
79247d4769e68facb113f6f1d5daccbb_JaffaCakes118
Size
53KB
MD5
79247d4769e68facb113f6f1d5daccbb
SHA1
7a122b5ec95f64fefd968c622457225c8fe04cef
SHA256
35898b3e04ee89534a4bba3bb2dd541eafed51ed21bc3a2513b3ef9822437b5d
SHA512
16e0ba4b4db22dbb5dccb1d09e34633eb6f7815c84661a401c014a78c0e01462e4271e34f368f06335c9dbbaf0c9cff02de49dbac6638c0757fd48c81c9509f9
SSDEEP
768:nbY4lZRyCUmAzTEtG0VlwCfSEaxQcQlrtTja0uRzx+vFZa63pcp577RagFD5rJ1:EGZJKP0VlwCfDad85TluD+v707sEhj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
79247d4769e68facb113f6f1d5daccbb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ