Outt
Sett
Behavioral task
behavioral1
Sample
b7687da7a5ad643d9e56a154bbfa29af_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7687da7a5ad643d9e56a154bbfa29af_JaffaCakes118
Size
79KB
MD5
b7687da7a5ad643d9e56a154bbfa29af
SHA1
8310aa06acf6c7f1537e8f6e67131cbb4e01cc34
SHA256
5bea9b70da3343589fb246c415e1080d88f28bd05f919507ba38adf2a2489251
SHA512
49e7c1ec46e916b721e5a50a7ec03ddb38a6367f60874fbfad4976b9aff97bc75b6b42881f0f1d6f49c8e4c55d4ca82bbab402ad120c717dad4c18ee8f6c894a
SSDEEP
1536:evXQB833NQ1GL6qQ71l7ZUEHF4yKBBJcrqDKj3UWnVYA:er33/LNQZl9UMF4yK/Jcrz3F5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7687da7a5ad643d9e56a154bbfa29af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ