Outt
Sett
Behavioral task
behavioral1
Sample
695b6c91c83614eb7ceb5447bb8fba36_JaffaCakes118.dll
Resource
win7-20240708-en
Target
695b6c91c83614eb7ceb5447bb8fba36_JaffaCakes118
Size
64KB
MD5
695b6c91c83614eb7ceb5447bb8fba36
SHA1
89bcf51fe1d75f514986c3dba486f5495077de49
SHA256
bc85dc4fd2fc7a9e96d3bfddfd1f4d4170d4c65b2df36136213bc325780b2e0d
SHA512
fa6f1176ece1c7f5009004be5fe234e5aebd1f92ec4f9237fc79bdd5fb883ba4dba04a2b4ecaa7d0e8ddf7c57fbba18c57accee3090c6b5c53907a5e4aa17394
SSDEEP
1536:qmmMRbJvUCyyNewPI2qUGGcjNEkO0nSQcFtoxW:QMR3OUGG6NXO5FtoxW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
695b6c91c83614eb7ceb5447bb8fba36_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ