Outt
Sett
Behavioral task
behavioral1
Sample
96418fe7c44e9c8d81d1fff6174f4c1c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
96418fe7c44e9c8d81d1fff6174f4c1c_JaffaCakes118
Size
71KB
MD5
96418fe7c44e9c8d81d1fff6174f4c1c
SHA1
2c19fff280dc92335448ec2a23d9f3af8a3d7195
SHA256
d4d3dfa0212411a094eb0349da871b843dc59c7a0ac211b28f8a96d66a041094
SHA512
463214c77be80ff3282336a01d32fed20b229d5907699639095fc0262964e8d0b146c5136ad2188150c0a6b2bdd3197933936ac74a60489237d4c830dec5f18a
SSDEEP
1536:Y7BstH7DwWwFSAjob66ZEZ9Yjfi58FjzMY3QTVgaYlmN:wBG7D61kC9YzUOjIY3QTV3Yc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96418fe7c44e9c8d81d1fff6174f4c1c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ