Outt
Sett
Behavioral task
behavioral1
Sample
94db284ec6384bbfe251fb4f2df56dd9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
94db284ec6384bbfe251fb4f2df56dd9_JaffaCakes118
Size
60KB
MD5
94db284ec6384bbfe251fb4f2df56dd9
SHA1
1c41462bdda254c0d257c54315fbfe0649f13f72
SHA256
ce59069fc5d853e675d91b6b06a22e9ef4aa95b26a2ea7ec3f5f28671c46c34a
SHA512
3572fc9ddce76ca9f2feb8ed56672c8dd1630d22a5360fff85abac5b13b81036480d2074fe8ab37f238509cea5e5eb30e6405d361ac06dc9f10c7d5fb4906829
SSDEEP
1536:yl3E0TKPJXHzVRNIeK3ku5ndnCw3Zb31mo:E39kJRWZ3pndnCwpL1mo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94db284ec6384bbfe251fb4f2df56dd9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ