Outt
Sett
Behavioral task
behavioral1
Sample
956b767974a55252f52987a26bcefabe_JaffaCakes118.dll
Resource
win7-20240704-en
Target
956b767974a55252f52987a26bcefabe_JaffaCakes118
Size
66KB
MD5
956b767974a55252f52987a26bcefabe
SHA1
48a0108c5369fd9d08bcf0f903794cd5d9ff1443
SHA256
83d9bc3f27d5c5633c8d0fa650b4f6b56d409c9dac166c7c0a36b2468ec0b7b6
SHA512
543c0e231618995e3b2507f0c0987525b1cf96f83956f684a6ec1633dac84faec4b1ecd1dce07a1be0f46d3c1bfa25d6c5f660884f1b5596c7306b2742e8a0b6
SSDEEP
1536:MhBRVgrExucMtD8h1aUxC7c0EeE+lJJQ6VueOD7f31hnaDdpqtqcj2Q:cRRsv8u0CFE/+vAeaDLnYcjp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
956b767974a55252f52987a26bcefabe_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ