Outt
Sett
Behavioral task
behavioral1
Sample
a334c70b391962ca14ccfd7502a24e3e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a334c70b391962ca14ccfd7502a24e3e_JaffaCakes118
Size
49KB
MD5
a334c70b391962ca14ccfd7502a24e3e
SHA1
17dcb173d3484f47c1360bd4263ab1096c6c7e6f
SHA256
915a6c81a2e3886cfe7a1d575fc59d5e9169e0cf94ec68be70ea924680af27fa
SHA512
769c7b9c9d68cc311b376653c2fe04631a730b822f634cb32947f7619bc77ed41bd3b453e2d32c057324d9524aad247ceef405271b9a570c53d9daa28c7af60d
SSDEEP
768:56IRmOOuncexmtAVIBZAzN/6VwKe4smD74qHfLKKY81L11vu/Mi/bbfGs0C:5jRmOhktAVIrYNKzsmD74kfxL11atffD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a334c70b391962ca14ccfd7502a24e3e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ