Outt
Sett
Behavioral task
behavioral1
Sample
00a07b736e471da2f797c9d3e2c3f413_JaffaCakes118.dll
Resource
win7-20240704-en
Target
00a07b736e471da2f797c9d3e2c3f413_JaffaCakes118
Size
82KB
MD5
00a07b736e471da2f797c9d3e2c3f413
SHA1
320ae06905f262b0041fff018fa19dbf6b2facb3
SHA256
e702e00f42a362c6646a18417c16af57cf2cb005f0e3362b5635cc713077f498
SHA512
799681d2c29e277f271fb485190f29fca373b3fd736ac78c319b9b4b84f254bc6367fbb2853f497073e09c6b37903b8d0ca3ff9b5f6ffca369ce047fe17e076c
SSDEEP
1536:2LOJMXV62ZsVGRcfa9lI7Ifyzk/H8UhEadXynYJxilu0HnQfwzrwDMzE:2rk2OYRI8f58UhEaaA0HnQfwzzE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00a07b736e471da2f797c9d3e2c3f413_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ