Outt
Sett
Behavioral task
behavioral1
Sample
695c41da3cb6e96249142c0d8c2243eb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
695c41da3cb6e96249142c0d8c2243eb_JaffaCakes118
Size
55KB
MD5
695c41da3cb6e96249142c0d8c2243eb
SHA1
ddab0f102d4175a44c80a1b7dc26d282e602ad3b
SHA256
8609aa333bfadc96746112b5234e45ad7cfbc48b822582b29cf079f794a3916d
SHA512
ca72026958b03ebd0854ea2f114e504e70c4d331bf1d88f40f9097be3e003e3de6fabcca817da7036bdcbc0da8f485bfd3bf7115182c6960acd5aa689609f73e
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTm4FCVcDcAgByH2D83mzOhG6yAfWWip5TQ0eb9dEFo:mPO6KEVbsVP0gmAma/yAeXZ8AWA/Zw1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
695c41da3cb6e96249142c0d8c2243eb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ