Outt
Sett
Behavioral task
behavioral1
Sample
9602f5f52214929b8b5042d658a6ea45_JaffaCakes118.dll
Resource
win7-20240708-en
Target
9602f5f52214929b8b5042d658a6ea45_JaffaCakes118
Size
69KB
MD5
9602f5f52214929b8b5042d658a6ea45
SHA1
c0606ac95d702dadec05843daa7d80641e7bcc89
SHA256
a80e6c889814c0fb2cf812856a8ee4578c9174775ae7efefefc77c74079fb73b
SHA512
fa3fd37f0d6edafd22a02e5a220aaf020b967d48c7bcc5b41df8f95274f525b5d63a5b135974ba2ab7f42c26074c249461dd25b6d4daebc6b3753b6d70cc45c4
SSDEEP
1536:yl3E0TL5mPkLRTXTlr4n0Yn2DodAG1DJmtGLPl69kAp:E39gPkLR7TBen9dAKDlLPA/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9602f5f52214929b8b5042d658a6ea45_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ