Outt
Sett
Behavioral task
behavioral1
Sample
b973bb6c6c09e960608adc81c02f2668_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b973bb6c6c09e960608adc81c02f2668_JaffaCakes118
Size
56KB
MD5
b973bb6c6c09e960608adc81c02f2668
SHA1
367e97a1a945e599aa9b9841d081d1b52d2a7f6c
SHA256
910fa24bc69313bd05379cca54b78d2c44dceb045d05ae5f202413282eca87f7
SHA512
909e86af753df92c6f519cf0a3615c86d7dbb276ae40b44fa6e4bf1a7293d9f05e1361c031820a46cc8ff5827918bcf4e648409266ba74274947622342795974
SSDEEP
1536:tl0dyBdvWGYdswPsha7mIv0mCDomX8ILi:X0dyB0G4shadOomXhi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b973bb6c6c09e960608adc81c02f2668_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ