Outt
Sett
Behavioral task
behavioral1
Sample
96a688e2b96030c01bf9d2b7bf6cf091_JaffaCakes118.dll
Resource
win7-20240705-en
Target
96a688e2b96030c01bf9d2b7bf6cf091_JaffaCakes118
Size
51KB
MD5
96a688e2b96030c01bf9d2b7bf6cf091
SHA1
e908c4e1d507f6211b58cc0713bc9759bc76131b
SHA256
cce2b316acc13dd7f41c2816a093f512c3968bc52bd3d3ab8018121fd94a8e1a
SHA512
010d7251e6c23f6d8d22fc0f9f3c46f3fcbaf6cb3b7598e747ce80b532691aecbab09c5863cad45f57bb9dc6d90fcb3d16c70d2e72a5d96eb2e722abfbbb5235
SSDEEP
1536:1zExMwCGQ2jtkPmwNfjG247Ypr/JRFWgIDhN:1I+wCGvZkvvCYpznFWf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96a688e2b96030c01bf9d2b7bf6cf091_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ