Outt
Sett
Behavioral task
behavioral1
Sample
697a885f97129d24d93f20cb0d2ec34d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
697a885f97129d24d93f20cb0d2ec34d_JaffaCakes118
Size
67KB
MD5
697a885f97129d24d93f20cb0d2ec34d
SHA1
d1d1beea51856a94a3c5da95c6fdad707bd769e9
SHA256
9a0331368c1625ccfcd808a7629befbb2c83f68e936976648ec217f405dabb50
SHA512
4d5eb31caa3ea1cf1b7f98c8cf16e245acda5a5307dfb58dcbd230318a1a7ec9dceca303fe12b505c5ef9143aad653e1c862b85475781c1b7d4f8f14af2b1977
SSDEEP
768:9xBtKtqyLU8Ek/nlzQ1nyuY6jD4+eZLaQOT6UupWm6EG35N3q3uv+ZiJrH3rDfxr:96ndQ11LALU+h03bP+o7Dfi7oL/ymB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
697a885f97129d24d93f20cb0d2ec34d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ