Outt
Sett
Behavioral task
behavioral1
Sample
691ebc5390602a10a6587deb5054cdcc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
691ebc5390602a10a6587deb5054cdcc_JaffaCakes118
Size
65KB
MD5
691ebc5390602a10a6587deb5054cdcc
SHA1
2d92c228a500c314593fc871a22409600260c90d
SHA256
2594f7de6a11800f8d19c4a2a716eb2faa00c119cc03b68033fa0218d87eba28
SHA512
c64c1184b1e7ae227a77f010096ed63c2741d32b6548decf95fe5ac87d7f87acc601c58a9b0082c6ca71f01cf1b15b33e26264bbe8176f6e3038b0d7069d35c5
SSDEEP
768:h8WTpVT0X8zb3WtoELpv9ZAa79HAdtMVOocmsFaTg3aomisbPgUEbIDGIVADZXGM:RVLWtdLpv9hpVnTUmrbgUEb+VjxdHE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
691ebc5390602a10a6587deb5054cdcc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ