Outt
Sett
Behavioral task
behavioral1
Sample
964a39dc628f59bfba4a81d246b1ba3a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
964a39dc628f59bfba4a81d246b1ba3a_JaffaCakes118
Size
79KB
MD5
964a39dc628f59bfba4a81d246b1ba3a
SHA1
1d382e2a318114349078757affdc6bd1c8aa62c1
SHA256
7b8bd92deeb3eb9aa661a39608a1db9d29aaef2ef94b98210bc873824b22c986
SHA512
e4d3f75f5dccb5acaacd8144087db569680dcbf2e15d73157c6da1b705137b4059725dbb531c5d9ccf17de7f47a97a7ef7b73af29004c41e7e5392993f9f4afd
SSDEEP
1536:1zExMwCGQ2jnBE/D2cMnmw1vrYV5INmBdotdJnpBgTT26g/WSr6:1I+wCGv7F1nmw1zYVzBI3npBge6KW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
964a39dc628f59bfba4a81d246b1ba3a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ