Outt
Sett
Behavioral task
behavioral1
Sample
a676cca6bfcb09c115a25797696e9d4e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a676cca6bfcb09c115a25797696e9d4e_JaffaCakes118
Size
68KB
MD5
a676cca6bfcb09c115a25797696e9d4e
SHA1
12807aa54396c004cd039ce41221bf71b56e858b
SHA256
77d5954470784e4ba7f41e0a2587fa5255f04c379e8a9d51456845ffc3794b32
SHA512
e2daf2e333ba9b144e7681b1d8a6ebf782d211da2ecac731824d8230f746c85fcb91d79be43145576f097fe459f7100c5308ca84aaa2f0509fc0f66d3e8e27e5
SSDEEP
1536:VZIcCxR1grokH1mQqsPTOpewhpzbAOIf346yURKYvTR:r+crok6miLPAOIf47U/TR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a676cca6bfcb09c115a25797696e9d4e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ