Outt
Sett
Behavioral task
behavioral1
Sample
69c9bc6b896fbad9237f2ab9bd64cea0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
69c9bc6b896fbad9237f2ab9bd64cea0_JaffaCakes118
Size
75KB
MD5
69c9bc6b896fbad9237f2ab9bd64cea0
SHA1
56388b4d935e88a5aef89e436ac41143ffd73dce
SHA256
f141fdfb2264c51794fefdfa9dc702c68b80c0b0827fa7aa665098e8b1385220
SHA512
60e472c7452dad1a42422f5b86721971dafc603b2538fb85957117da85c5fb97453ad1f75dea8d10fc0c42cc77d8c9d2dd16167f5996dcd09ca187fabe0e329d
SSDEEP
1536:EGyvQ2Tx81fwpoE2NbD019Ebks89QmQ+wNKygFsR9w5zBBM:EGyvQbfmoE2NbD0YbW9HwNLgF95zBBM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69c9bc6b896fbad9237f2ab9bd64cea0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ