Outt
Sett
Behavioral task
behavioral1
Sample
b7e15c0819722afdc38f63ff16a3bd99_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b7e15c0819722afdc38f63ff16a3bd99_JaffaCakes118
Size
55KB
MD5
b7e15c0819722afdc38f63ff16a3bd99
SHA1
e8f7012d0aaf058be7ee0e45b1c922e690cf399c
SHA256
3948f7aefc95eff822c3359cb1861e16fc308e9e8db3ff721e5045f2cf51bd76
SHA512
7400006abea60b5c29b57f3d02eb1ead80c02dc3a8ae74aed8c298578061d817c3a13f3f4aa3caa9b545ffa2c2ef532292766406f652aa41e88d52300bdeabab
SSDEEP
1536:1zExMwCGQ2jrkynQnPwES4x5NFBf78m7uHhGtZL1n9bGz:1I+wCGvT45l/D7c4jhn9bGz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7e15c0819722afdc38f63ff16a3bd99_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ