Outt
Sett
Behavioral task
behavioral1
Sample
b629ad8a519b3f7342e1189eaf7f131d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b629ad8a519b3f7342e1189eaf7f131d_JaffaCakes118
Size
74KB
MD5
b629ad8a519b3f7342e1189eaf7f131d
SHA1
12e17d6dc4a5552e1feea228e790ff3a8ded5d75
SHA256
37a393903ac048ccb4a53a0cb692c1264a7572af0826ae953fd6bb9cea0d0da8
SHA512
81285046a7e381f53768de025b1ccc20cc2289c792f7ea5e8f8f61be1e48c033bc86d9e800bbda8761d6a2182d1725775a45f2e256dde06f01fbf6b0e096028a
SSDEEP
1536:1zExMwCGQ2jiI8J0LUbn05qWjfJSwQw0jsqWyCDnx:1I+wCGvz8J0IbnYqkLQwQsQC9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b629ad8a519b3f7342e1189eaf7f131d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ