Outt
Sett
Behavioral task
behavioral1
Sample
95baf00d8860b8d8c0e946740a1f2efd_JaffaCakes118.dll
Resource
win7-20240705-en
Target
95baf00d8860b8d8c0e946740a1f2efd_JaffaCakes118
Size
55KB
MD5
95baf00d8860b8d8c0e946740a1f2efd
SHA1
75edec6e6303a1d513cb604c25473cc814ac85b7
SHA256
c9a246cd6731f6a3cea8c4b855bb6f6fb060a721ce96b59daf69389cf6c96c6c
SHA512
dd723b15c99ee57ec213ed985b0957e297628e791cf7fa95d46b411409e07b5926e87a261667e1754855bdb7b1fc32935061893ec823bf9fbbe7e0a8bddb81e7
SSDEEP
768:hM1opOjOOfwv04jeUB/bagA53VX1icGoIm33DR4GKXZn76iKKWYmPONyPAbYRm:anRTiB/bm53VIM3zR4bJ2i2Bm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95baf00d8860b8d8c0e946740a1f2efd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ