Outt
Sett
Behavioral task
behavioral1
Sample
b9d7fda0f83bc196353ec1d507899c73_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b9d7fda0f83bc196353ec1d507899c73_JaffaCakes118
Size
61KB
MD5
b9d7fda0f83bc196353ec1d507899c73
SHA1
ef6524279c6721b9afb7c826534500d8ef3098a8
SHA256
5ec584a04d5942bf80e00871b1cf3945829776e639a75c59c14357309dd0785e
SHA512
193cce5a19c092d6427ad8ecc270a911f62a2577b50a086a8a24185e2679d05fbc4b21d63cc6aa7566c2bdde3a710b593f3c9f0872fd313da9cfc76fe770df97
SSDEEP
1536:agF0eiyUcbAHrNdVn8Fu4p3PHriFxOLWGK6j:t2yFcHJdVrafLivOLZjj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9d7fda0f83bc196353ec1d507899c73_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ