Outt
Sett
Behavioral task
behavioral1
Sample
b073fee2031b05c6cfbb232a23de2d7c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b073fee2031b05c6cfbb232a23de2d7c_JaffaCakes118
Size
70KB
MD5
b073fee2031b05c6cfbb232a23de2d7c
SHA1
5f47ae87fcb358f2095fae6460b73b72aafb558c
SHA256
2084d3f0bbe8a02a388d92bd999e3e64c1f41e503d43315062e7515fcbbd671d
SHA512
ceb13195bd4eaf394e3816496510dd6a2da41a580cbd520050e3fb488ecbdec4ac9fdccf05c3fefbc6dc211d4dc7f3c17e290c665fb888fcd6ba82a7d25d9c97
SSDEEP
1536:agF0eiyUcbdz8uxj9HkH8Kzwe/MP+4kh0f7:t2yFBP5PKzwe8+4Mq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b073fee2031b05c6cfbb232a23de2d7c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ