Outt
Sett
Behavioral task
behavioral1
Sample
95862e945a720607176eb27350069c35_JaffaCakes118.dll
Resource
win7-20240705-en
Target
95862e945a720607176eb27350069c35_JaffaCakes118
Size
48KB
MD5
95862e945a720607176eb27350069c35
SHA1
d5b61de6dbdf78de522c5f64cbea5d32a15cd89c
SHA256
0b53c7c59bcb830b81cbaec9d7da4ff652da2f6e741f6a5ee3cb3a292218781b
SHA512
1ccc74d736c67ff50c9149a505d039011d619ef9ba6004a2fa10db285a1c0381ba97b106128a7b8500061af5b02af47e0eaa603acb01f199dc3e43dc2634f519
SSDEEP
1536:V2bkfvaSLpVkEsIK+yWViOjy5rXosRU1v/kz1Ra7lfSN2Ga:W6vaSLowyZv/K+zra7Iw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95862e945a720607176eb27350069c35_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ