Outt
Sett
Behavioral task
behavioral1
Sample
a763571ce3eeff901e73e98fd3e3b434_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a763571ce3eeff901e73e98fd3e3b434_JaffaCakes118
Size
56KB
MD5
a763571ce3eeff901e73e98fd3e3b434
SHA1
6a7341caa2868587712cc1dbc30e401011341f8a
SHA256
471cb450ca5945248cfca395f2ba28ba20f1d85e63897b69185f3b2bebf285ca
SHA512
4d90c367a76bee29b18eabc3251b2e53619f52f614f02633244a405e62246d3e87cca1aeb047a5e1c7a5ce28ba4b17784b29cdbc9ebb128b259e8882a87a09e1
SSDEEP
768:GbvLDaaMact8TK24JPX1mV5XRznCVjSY2W7V/xUXPkHE4Eq82bXmwC1XKG/WArC:evN4JPXWVR28YJzGGoq82bXmwC1feArC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a763571ce3eeff901e73e98fd3e3b434_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ