Outt
Sett
Behavioral task
behavioral1
Sample
b77e1243f59a7c30a68d3f744d21c627_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b77e1243f59a7c30a68d3f744d21c627_JaffaCakes118
Size
62KB
MD5
b77e1243f59a7c30a68d3f744d21c627
SHA1
6fe17cb66413108df8fceeb592685324755e0d69
SHA256
4d3110208f9ad48bc698665492825fde084fe4aef33aa72f1fca5cf5b319848e
SHA512
c2c496c4742fdffba7a35c8e97cee199b1388a07a12466df364ef2e914fbe5c81696af72b24e8fc297fc57538802741b771ed483f17b1b570862e41b98e89d06
SSDEEP
768:GbvLDaaMact8TdrFDsyilzDZK79QsAyvMpSmdkB8Mn5qi6YCEyskPnNtopJekaRh:evNF8h3+MpgBhn27DPnNtEekeNL3qNzM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b77e1243f59a7c30a68d3f744d21c627_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ