Outt
Sett
Behavioral task
behavioral1
Sample
37e7055f04d579263bf50d174437d914_JaffaCakes118.dll
Resource
win7-20241010-en
Target
37e7055f04d579263bf50d174437d914_JaffaCakes118
Size
71KB
MD5
37e7055f04d579263bf50d174437d914
SHA1
6ac9a00a8b1064677ce8173690a0ea0cee065585
SHA256
d324c71b713850fbafd6958e54dcb96095e85a6b9dbba5c9c9e047772403afaf
SHA512
875814aa6027b0baf5a2b4a861905bf96f0007770ca0328992c02c0287f73072aba9aafbeaa74cea0ecd21fbba7ac24bed95c58321b70a130b139a1a0987fb33
SSDEEP
1536:2hq93gcZxX1PeBf/L460+Lontq6Tx7uY3Snh8SaOG1x2R:zX1P+/ELtqSJ0h8bX2R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37e7055f04d579263bf50d174437d914_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ