Outt
Sett
Behavioral task
behavioral1
Sample
94d3c8cf276b4b03df8c89498463c658_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94d3c8cf276b4b03df8c89498463c658_JaffaCakes118
Size
68KB
MD5
94d3c8cf276b4b03df8c89498463c658
SHA1
a64f61cafa943b84e680befed378a0e0c053f2f2
SHA256
1bb6a4c34496699f3ddc43b5e12888f022af400fe3eca11f08c26d1b06658d81
SHA512
d101e48f394da7d1ac43c0c1ce0118e583535c70244510164741226cda3d094ed1a4ce6fb5e90e609a17ff6aeb8ac827708acd1753c2a8f5d5f020aa047040c2
SSDEEP
1536:9SbZjokd68k5n3w48u8UhWO1NBEx/waO4CnGvk:We06nn3h8tUlBEaaiik
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94d3c8cf276b4b03df8c89498463c658_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ