Outt
Sett
Behavioral task
behavioral1
Sample
ad55774d9b4f9d9d33559e8fb7ba44c7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ad55774d9b4f9d9d33559e8fb7ba44c7_JaffaCakes118
Size
65KB
MD5
ad55774d9b4f9d9d33559e8fb7ba44c7
SHA1
96a1f74e1c48172cb480159e6f8ae4df3981e8de
SHA256
71fd2cd049b61ac1abee1e801fbe459d145d9338021bcaa1a98a955a4a3e6047
SHA512
e6c7ba1c6f4cca7db25d02a9b737764fd9bd381dea22d90c72c5a2b35d808b1f9fcd720bf43c645da8d7c2191932ec810d08ba2a3fe882f076229d23506549ad
SSDEEP
1536:n7ZLNPp9pZBMolTEpzsbabKXl9XWgK0tlGf4gM0zl9Ynm:7ZppdlTEpzs9RWN0tlGfvMvm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad55774d9b4f9d9d33559e8fb7ba44c7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ