Outt
Sett
Behavioral task
behavioral1
Sample
974b95d8c3dd4e27ddb9a7d6a60be030_JaffaCakes118.dll
Resource
win7-20240705-en
Target
974b95d8c3dd4e27ddb9a7d6a60be030_JaffaCakes118
Size
65KB
MD5
974b95d8c3dd4e27ddb9a7d6a60be030
SHA1
747d1a3cc4ac3a12778eeaf7f373c441cc4df777
SHA256
e74003745379c28726b4bbbb12983f9e11499788a036cb7215b68c9050625bb3
SHA512
c485f585c3e7cd23c160ff548ba04cc4e67e4514887fbacfcd865a0086868850d2f3bd1006f5a2372917d9b4a94a0ce5916825bf0ff0059359ef2b421b1652ad
SSDEEP
1536:yl3E0TqNAIgzHO9zkY7EZ/kh7CrzBSa/LjRz63JFeBJL5:E39mNYuVN7EIOZP/Lh65Fed
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
974b95d8c3dd4e27ddb9a7d6a60be030_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ