Outt
Sett
Behavioral task
behavioral1
Sample
9594c6464265148baed6d25403072b5d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
9594c6464265148baed6d25403072b5d_JaffaCakes118
Size
63KB
MD5
9594c6464265148baed6d25403072b5d
SHA1
faf9a0a442ca4cfa8117d2df6bcc63d958078619
SHA256
c1c21d85192e2ec7ae221b1cf5ad894c6ad69a64c338a2b37774eb90ab1a4940
SHA512
8db601113b5059205d77750334c1bd4cf5f471b45f66485c7ea5e108724276a82423fcf4c998c9506075f19a3c50fd5833c4f5f22803f3eb5e320e9db070c94f
SSDEEP
1536:1zExMwCGQ2jq3wwORU/3PZ/OOz8mxNLVpH8oBEtIzDQJmzsEoVj7:1I+wCGvnwORO/hO0FPPEtIzD4mgEoF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9594c6464265148baed6d25403072b5d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ