Outt
Sett
Behavioral task
behavioral1
Sample
872e907ca2d6be431684a8d8faa93968_JaffaCakes118.dll
Resource
win7-20240729-en
Target
872e907ca2d6be431684a8d8faa93968_JaffaCakes118
Size
76KB
MD5
872e907ca2d6be431684a8d8faa93968
SHA1
ae16748f552f79ed088c1bf35ede45709c96518e
SHA256
8f6aa240b3fbc357edfd3c258df9987da3b9cf0fb353d0bf20c6ed6aba23be3b
SHA512
b73e89c8ddf6536ce6305afbb9ec66fbb7b7cd7bac40f202e7b8c5caa1a695da35ecd567c81ad3470baf72889d485666ce01234f6062c2d9c1325155b08e57eb
SSDEEP
1536:yl3E0TH4+GqIPOsaJkLiDbrifLvem4o/vU7/ewdZ0xfbixoew:E39JGJSkcHYLWh8u/ZZSiuz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
872e907ca2d6be431684a8d8faa93968_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ