Outt
Sett
Behavioral task
behavioral1
Sample
b7501d9382a04b26af39ea61e420cfc8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7501d9382a04b26af39ea61e420cfc8_JaffaCakes118
Size
66KB
MD5
b7501d9382a04b26af39ea61e420cfc8
SHA1
0b49b38067673fc5f57cba3d4d937562724e7e54
SHA256
2aeb496b650c433279e51caf2424e54b8d5f8be2dc84617852c42c962a414c67
SHA512
2fb0b9b42b88b5cd7bbdb74112c20453e447291340e5ee27f1b6c5b8743be12061a6c0f03e919b35a1787dab4a20710346e950cbde2465d3eda87805b5f56250
SSDEEP
1536:RVu8sX4651TxuCEcpsYO7NCI+8GqA2V7uUCz3:TgX46YCERXS8GkMUCL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7501d9382a04b26af39ea61e420cfc8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ