Outt
Sett
Behavioral task
behavioral1
Sample
463cfcfa00d3676f6d0759a41cb2262a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
463cfcfa00d3676f6d0759a41cb2262a_JaffaCakes118
Size
72KB
MD5
463cfcfa00d3676f6d0759a41cb2262a
SHA1
5f33e38b082d4e9325b57718c3f2b47d06ade237
SHA256
4e0c3d4b14350f2c29101697f9a8472e5c749e8d1f7a45974bee6c42bf7e2921
SHA512
30488b203e6e74aebb11f24f0f79e2d74186f56305709dfb8d07db9164aa1ba3fac1970879806aef1457a703feb6ba06c285a1cfde76e1b4fe4236c3cd2739e6
SSDEEP
1536:9eJUkQ/aBe+ZdKRIXaIJ4Fs5xefm5I59Vd8ITUn94:f48iXaIJ7ae5IHUn94
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
463cfcfa00d3676f6d0759a41cb2262a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ