Outt
Sett
Behavioral task
behavioral1
Sample
30d74786b877dcec30c8f8f17d8a4ae9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
30d74786b877dcec30c8f8f17d8a4ae9_JaffaCakes118
Size
66KB
MD5
30d74786b877dcec30c8f8f17d8a4ae9
SHA1
c930c41a40dcc866bfd52503d8d7d8f4552c3207
SHA256
a8ccf23c4a98ab1baf27ada56025226766c8389107e27fb61284c2bada53eb27
SHA512
8671bf8e6a9d5dcc5f5ecf90b52b06a27f22518a4f2742b86871a87ebc0d29388adc73372698986d0b58df9b026f9244be57b52475a2e5ed9189ac319fcb5ef7
SSDEEP
1536:5jRmOfG8wO5sPZwaO1IBUFDs9Qvyt4u6RlnuotGO6M+F9C890rG:xfe8wi4Ko9WBFTZ0hZOrG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
30d74786b877dcec30c8f8f17d8a4ae9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ