Outt
Sett
Behavioral task
behavioral1
Sample
37903c907a977faf040a5a1c040b8447_JaffaCakes118.dll
Resource
win7-20240903-en
Target
37903c907a977faf040a5a1c040b8447_JaffaCakes118
Size
49KB
MD5
37903c907a977faf040a5a1c040b8447
SHA1
2ac149a585da844745735fa945ee88818dbc8f20
SHA256
e198a65873555413e92c37908a7f5ede3061ca4a0390deb8131b7017db601654
SHA512
e6840e5008614edc433d1b5b382f11a09c4687bca9f3160ade7c243d43a67e75bd9aeb9d455231c3498a3b3ffcf07b306136cc55d5260f83a64946dbefef66a9
SSDEEP
1536:MhBRVgrExucMKiT7YnHZQDoQNVewwspCZOWFH+j:cRRs7T73sCVz1+nH+j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37903c907a977faf040a5a1c040b8447_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ