Outt
Sett
Behavioral task
behavioral1
Sample
b74a708dbabf05c51d24282f9ef5ad3d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b74a708dbabf05c51d24282f9ef5ad3d_JaffaCakes118
Size
68KB
MD5
b74a708dbabf05c51d24282f9ef5ad3d
SHA1
e456415cd8e87cde02d271d4ea923c49fed320db
SHA256
1c6ef3be70b8ee3a3d894682922a69bb9d026b77703f418e175d37330013c350
SHA512
73b6ecde8fdbae4045c02e5834f22ba4e4acba1e1c5d8ab56d30dac8fc8fc7fcfd25a68a2ddb47a07f604f4e0cc5195599428558c8e2de634042b6069ea7d785
SSDEEP
1536:agF0eiyUcbM3OVhZasmAOPhcX/TqRV5sAXiSX:t2yFPnUsk6XLe4/SX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b74a708dbabf05c51d24282f9ef5ad3d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ