Outt
Sett
Behavioral task
behavioral1
Sample
94584cd4e651ef2b8616af1e5f61bbc6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
94584cd4e651ef2b8616af1e5f61bbc6_JaffaCakes118
Size
55KB
MD5
94584cd4e651ef2b8616af1e5f61bbc6
SHA1
6846a5f48f39c22531caa0e0922c9fbb10b27502
SHA256
26cc2c372afc8b188ff92ebc8e345f63729e12ec79b56a4e29b5489e542a47b8
SHA512
6e7305b40cbf4825ba1041fb21513a62887eae559f7284590ff6ad298ede79da03aa26a9f885f4f9b42382cabb98400b3200a12424b4ec8771509b6b4d2e2e5a
SSDEEP
768:qz6nzm1b5gNZLLrJAH3/bg+vmzme/Nn7p5j8QIvwOcw+8uTyhpddNptkRZq8qdcd:qmmMhAzJvM1XIvQ7ry7LNXmdI0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94584cd4e651ef2b8616af1e5f61bbc6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ