Outt
Sett
Behavioral task
behavioral1
Sample
9563e98ddab4c4d49fcd4d0a8011fc97_JaffaCakes118.dll
Resource
win7-20240704-en
Target
9563e98ddab4c4d49fcd4d0a8011fc97_JaffaCakes118
Size
53KB
MD5
9563e98ddab4c4d49fcd4d0a8011fc97
SHA1
8543b80a01cadc1a26ca77c72dff48cc6520cc55
SHA256
05e84b360de4647d1fa7bd4d966d541f96c55b0c9268aef0dbbda239a96c0923
SHA512
c481940060695ea63b757275df57363e3b11ba2857b7107fbcd2c86393aefb860ef061c3d72e9ce1b46f101c5c3c336b10b149c87fb5cc4faf14769f1e774020
SSDEEP
1536:ev4MgJ06a2d2JeYfq9IfLTaVFgQVi7bRwuuZtu+GFlw:QL2zYfFfc/VQWDjgs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9563e98ddab4c4d49fcd4d0a8011fc97_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ