Outt
Sett
Behavioral task
behavioral1
Sample
972cd56cc465cdcb83b6e1fafcd45f2a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
972cd56cc465cdcb83b6e1fafcd45f2a_JaffaCakes118
Size
79KB
MD5
972cd56cc465cdcb83b6e1fafcd45f2a
SHA1
c5293c2fbd4aa7f1399af6a1184b496b4dec5388
SHA256
73d08328704d00df2852a3b1e8883583c39e726cd17d60fd8ccc9aa1345d2dc7
SHA512
17ec79cf21bfc2d242cb2b2c5cbef0c672fdf234277313d783d43f380e8b04b2964e35dc30770053cc2fb6118bb91c2a34eb8146c6f31ab0662722d5740106a2
SSDEEP
1536:ev/l+0IdqtW73cvQ/6hdLLOwLO85M9Fw9FeD2up9+22JAG:b0IrMNdL6854qFvAG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
972cd56cc465cdcb83b6e1fafcd45f2a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ