Outt
Sett
Behavioral task
behavioral1
Sample
b7591d1bfc4ccb950902c1a72ecfffdf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b7591d1bfc4ccb950902c1a72ecfffdf_JaffaCakes118
Size
57KB
MD5
b7591d1bfc4ccb950902c1a72ecfffdf
SHA1
594cf70be0740f9d1e26e079e91009efa0744cf9
SHA256
0b5dc3e9415c7969eed3bc937f2faf75273bb0adc21ea9c6afac2203444b8681
SHA512
8a91ce118ed946af4df2433c622dfe0281286a8976a93edd1092d45e5e5b6c395f9789a06533fd9e7d779678e44c29593c4d7317caca62d9505adcd1da0d2f66
SSDEEP
1536:VZIcCxRgtcPWKib2ohN2eJwR1fG/CUGJTvkz:r+atFHaoXAR1fUCUGJT8z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7591d1bfc4ccb950902c1a72ecfffdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ