Outt
Sett
Behavioral task
behavioral1
Sample
956e21e17d3fef2ab241c6529bb0893a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
956e21e17d3fef2ab241c6529bb0893a_JaffaCakes118
Size
57KB
MD5
956e21e17d3fef2ab241c6529bb0893a
SHA1
198c07d0b53902da74352821176db214de351f2c
SHA256
49d9105354ea191d8a3d85127b9ea8290795dd742619242341f86e0a7670c239
SHA512
4d3968210eb19c2a5bb7e954c7e64c8d61155ebf8d9c423a1abfc92a9a55b0160a9cdf184cec8ee6c7c93ed1f3cfadaaadc77efe2e8193aed4cfeb79d5aa8cd5
SSDEEP
768:GbvLDaaMact8TfGPgSwh7HTlRyuzZxDaHDHBjRWY+OrXLYNRw3s2L+LpsxSga3Ty:evSPgSwNrpXKDHBXrXkNRcs2L+iKTUr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
956e21e17d3fef2ab241c6529bb0893a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ