Outt
Sett
Behavioral task
behavioral1
Sample
89d96d6058c64d3328090a67311d5672_JaffaCakes118.dll
Resource
win7-20240729-en
Target
89d96d6058c64d3328090a67311d5672_JaffaCakes118
Size
74KB
MD5
89d96d6058c64d3328090a67311d5672
SHA1
996b2701c6aa3d1c969559fafb030f180eb94ad8
SHA256
220e7d26dc7ed1ea9bc71197d1325de3f5cce12058c335ea5c17b07dd515374c
SHA512
c690381a7f18883d6a41a687f42770ed11e2c6acec23837703caebb0520f2e19e14cbd22a1cbf1138655f29157a8b4d912d04c27bdfa174da8a6df71e8f41836
SSDEEP
1536:agF0eiyUcb2Yjt++R70+oY42HXnqQbVHoWwQZB1gH/DnL:t2yFLj8+R2sXqQb+WBb4DnL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89d96d6058c64d3328090a67311d5672_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ