Outt
Sett
Behavioral task
behavioral1
Sample
94a7008829c9d7db5ca5b6227798d6ce_JaffaCakes118.dll
Resource
win7-20240729-en
Target
94a7008829c9d7db5ca5b6227798d6ce_JaffaCakes118
Size
69KB
MD5
94a7008829c9d7db5ca5b6227798d6ce
SHA1
2bd9f227791b4716ddf979e719c87df626a5872f
SHA256
3150edfb2dda0ffa487392578c0a101132ef035bcffa1fca2ed98024660188a3
SHA512
e97bc2ad4400aa2dc6b34c882e9a8dc71755ff14796257f54393fbb1d9d4709bb7d890bbcb744fcf831b55ae1653684defe9fcf8a782803b3ce5cb4fc9fabec6
SSDEEP
1536:agF0eiyUcb6kunuWIT5ZoqilHgDHx/O1lndy+tlzhC:t2yFHtlT5yQbYH4+/zhC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94a7008829c9d7db5ca5b6227798d6ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ