Outt
Sett
Behavioral task
behavioral1
Sample
be60276a75dbd324f24d0509a84d0f62_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be60276a75dbd324f24d0509a84d0f62_JaffaCakes118
Size
44KB
MD5
be60276a75dbd324f24d0509a84d0f62
SHA1
5dd1f0454a0333c723e941cc08ba44ddc8eea236
SHA256
889775d71b8842819aeafe13653b82a3b45723daf0ffdd82bf9ce627436af136
SHA512
8ee45993d96b1e15637ddb67a15d9afceaae6a10d7af3c3cfe383564bdab85b622a3ed69f7e6346f82562d4e4aa8dc15f96755dcd153a734f8bb7d50ce996d54
SSDEEP
768:z3OHS8KOzu/1N1AjBrZnBPKXQOaOSbCS6Rx7y0Xp8jrdXpYog78:yHZymplBPKXQOFeCS6Rx7youpXzgo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be60276a75dbd324f24d0509a84d0f62_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ