Outt
Sett
Behavioral task
behavioral1
Sample
a71193fddf8bbc10f61c83f12535d694_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a71193fddf8bbc10f61c83f12535d694_JaffaCakes118
Size
56KB
MD5
a71193fddf8bbc10f61c83f12535d694
SHA1
73d9e329ac40464196f12e70665c530cd271fde4
SHA256
bafef033c26bc6a02540afbe687e6b150873802622b21c25bdc9db1cf6d68ccb
SHA512
c48ef16177ffcf63e8e1371e1e190a8ec4fee359aa57ae1746703826345e8347bb8dc00d594a096a164a4265e3c1999f0d5838dd9f61b9093e2349e61ff35a62
SSDEEP
768:56IRmOOuO+hutEGsQMRnTmW4VJ2B2pE/WhsB35ZoQ/z/hc4sXg7SkVJxTuRqXypb:5jRmOHQTMRnlmMchsZoAz5kkVriHqWOU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a71193fddf8bbc10f61c83f12535d694_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ