Outt
Sett
Behavioral task
behavioral1
Sample
695bd0a676749b47c3258070faacdacb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
695bd0a676749b47c3258070faacdacb_JaffaCakes118
Size
68KB
MD5
695bd0a676749b47c3258070faacdacb
SHA1
f30373394376c963f1a45c5e929cde4e4a0d09b9
SHA256
9444503b1e67a3eeb85540db380d427d57f9d161765f0aad50fb3a345be185a5
SHA512
a7a08b78e60b71b30f09ae22153deb650cd7a6323bd5b53694695c684e6966eed6bed3aac6a5075a9b9a4316566a06780d04e5378b5bb9bbbe8c0cb73ade0cb2
SSDEEP
1536:Mq/JmJSPcdbG6gXBMTinX5nIEnELWL0huQSgOBp4ilbilxL:z/JmJSPAbGXBlnK5WYhuQSg+p4iuxL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
695bd0a676749b47c3258070faacdacb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ