Outt
Sett
Behavioral task
behavioral1
Sample
696add1d623766922cb4ff9ea92d3107_JaffaCakes118.dll
Resource
win7-20240708-en
Target
696add1d623766922cb4ff9ea92d3107_JaffaCakes118
Size
76KB
MD5
696add1d623766922cb4ff9ea92d3107
SHA1
95de47b6b3569ad3d6b7d6f213b4a835685e7c30
SHA256
1c6163e77fc1d5a4625d240293d095d58621e8b3401958537d037f3ab8826d83
SHA512
f31202d52985a90b03fa294062b0d348c0a99f9d4917bd82a8ed10851618b39dcab2aabc24b259ac696da8b80a35706b70e701e6e0632a472bddabc3035a6267
SSDEEP
1536:RVsBulTJ0hAlzTDB7JSVyc44xoXwhylYKRnKnw2Azlv9VM6plHc:TJNU+7J3c6XxRKbA9q638
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
696add1d623766922cb4ff9ea92d3107_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ