Outt
Sett
Behavioral task
behavioral1
Sample
957bcb9e566fe208165f9f1d47288e6f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
957bcb9e566fe208165f9f1d47288e6f_JaffaCakes118
Size
59KB
MD5
957bcb9e566fe208165f9f1d47288e6f
SHA1
f7b3eadc0c9fe23adccc99c09e3fb6f420424ee3
SHA256
84d969a50590845f3e93ff2a907592d961c70e321e1bd8229c0f7d345299fea4
SHA512
71a262d428ee55b57a410a52d1370e3d7017d0cd37568cf4eb975731e44fa7647cd9c89cfada3409d2314f89c741510287c3d6f0303f597ca73e99c31b84e848
SSDEEP
1536:agF0eiyUcbbtNzNeC1Ph9W8DHR/nWJ5l/VQ3jLg+5:t2yF3/NeG9hlnWJs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
957bcb9e566fe208165f9f1d47288e6f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ