Outt
Sett
Behavioral task
behavioral1
Sample
b7961b761ef8cae5969d70aadb27bd92_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7961b761ef8cae5969d70aadb27bd92_JaffaCakes118
Size
63KB
MD5
b7961b761ef8cae5969d70aadb27bd92
SHA1
9c04cb1e8a0ac7657b9353456f950f87c12c77ab
SHA256
589c6b4fbd990cb969949bd398d420c6c4eaaf4f3f6cad8c20c55b07a7f696e4
SHA512
e57e49de2b5dbe04ad98678a2f954c073133c3903675ea6cd8653d95fb55a0b514ed5526b32c3aef2a579bc255578dffa82119c20764423b4dad21bb7b0651c1
SSDEEP
1536:yHZC+2e3grwW8jVmO7iqA6apa9ai0C3FGdaRX7ze:yHzFgwlkppawiB3EdwLze
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7961b761ef8cae5969d70aadb27bd92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ