Outt
Sett
Behavioral task
behavioral1
Sample
b0729069c8e24bb5e6368d8dde2639c0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b0729069c8e24bb5e6368d8dde2639c0_JaffaCakes118
Size
62KB
MD5
b0729069c8e24bb5e6368d8dde2639c0
SHA1
b8562c570ee48ce1984900b79244dd65b06c9718
SHA256
49a6b90995aff54c50e561edb46a290fdc978acea088cae29aac5121fa32bcfd
SHA512
0bc03fea29c84054d40e9eef587dac5623515d899868400e2efb86c84b5a23a081200f75c5c586409de15c1ad31c2eedde203859961e5962fb4538ba7e94e4bc
SSDEEP
768:nbY4lM4Iei5MAjCeb8txly6QAJW3FPYlNmEHkqnYIJFHSWwBsQNE6GHujLvYFQ20:EGZizj32x381wCsP6QI7SRB+0mH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0729069c8e24bb5e6368d8dde2639c0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ