Outt
Sett
Behavioral task
behavioral1
Sample
95e35159eb9fa4d1d590b9ab8516876e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
95e35159eb9fa4d1d590b9ab8516876e_JaffaCakes118
Size
84KB
MD5
95e35159eb9fa4d1d590b9ab8516876e
SHA1
d7feec25f65c369482e2fa4255bc8a429210a6db
SHA256
603ae53c3f3edf1bb3e47873262ae5b42701b236d71ba9709b154faf701c2d32
SHA512
08cbaf7f1d3bcfb3cf6180d35087b72602df7658bde02172e3a559fe488386a2761576365e965e99fda38227d397aec8f02e0416fbd4567df1777f3b7f59b079
SSDEEP
1536:1zExMwCGQ2j/5LNomdEEr8hV4ThKAQngmfzmo2CCnDqnW5HB6DEU10DVk7WOnStN:1I+wCGvL5LemeqqngmC1CCD9/uEFDCvQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95e35159eb9fa4d1d590b9ab8516876e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ