Outt
Sett
Behavioral task
behavioral1
Sample
693ee96822db13e01496a921b1729b3b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
693ee96822db13e01496a921b1729b3b_JaffaCakes118
Size
51KB
MD5
693ee96822db13e01496a921b1729b3b
SHA1
bfa94dd6673353c079bf0513417dc0a5544716cb
SHA256
8796d985a3d77d13a6c0e951f9dbec9f046613716eac69cac8ba2d82c10b6a4d
SHA512
5670799836230c474a18406fc41b62d8c1e2c84b47ba358b63c549f2cabc43c16b0c81ca51b8e798ef54422e40b76051429a9897ccbb9da387cdb320e09e7ae5
SSDEEP
768:szM2xVV/E6NWUmO/RNiCjv4b7RS0J/hI3Srq/X3RUrInfxPpQ4O/kvv3sIs47Jhk:V2b3j5794P83CrqJtntpQ4O/q3sIEb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
693ee96822db13e01496a921b1729b3b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ