Outt
Sett
Behavioral task
behavioral1
Sample
96018c90b8a4926b69c22bb384da51ac_JaffaCakes118.dll
Resource
win7-20240705-en
Target
96018c90b8a4926b69c22bb384da51ac_JaffaCakes118
Size
67KB
MD5
96018c90b8a4926b69c22bb384da51ac
SHA1
a37387c3d992dc682ccff2821ad9c5af6577a5f1
SHA256
82c97cc8d8d1d2f685d0a8a77ffaa1747515cb389b9e15d49ba0422771e67d69
SHA512
5826dd3fdbdd3e210ee919fc4b0e3e7e644b5de43a0b30f27544305b3044af7e454a2e6eb91f85d6c9fd4bcf3a3f8b8ca072fb14532db6efbb6f0e6dbe5c4c3e
SSDEEP
1536:agF0eiyUcb4QgCCZwyr+zK0ZVt7TUkfwc5Hc6:t2yFBgD6ztVt7dZc6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96018c90b8a4926b69c22bb384da51ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ