Outt
Sett
Behavioral task
behavioral1
Sample
96d73536c66b162be317fc1d4aa064de_JaffaCakes118.dll
Resource
win7-20240705-en
Target
96d73536c66b162be317fc1d4aa064de_JaffaCakes118
Size
68KB
MD5
96d73536c66b162be317fc1d4aa064de
SHA1
5ab7eb1cdd3972cc9dbe944e38fcf5ef5a32b3df
SHA256
ce817df25f4223742a779e9226d654ac860b509f90c2aaeea39f76f0dc1cf52d
SHA512
2dfe7e7cd25e623415158a75180c634c70297b8ed65badadeda33088f3ed49772b8e2146e394ff8655259e0f77bc8c42205c0db45135da5259da85db040400dc
SSDEEP
1536:GQ3tfgXKtC/u+7zdX4UGylkwitBSnF3LVegtAia/p/gbAIU0KV6YTba:VfgXKtC/nZ4UGt7mnBVeL1dg8IU0KVtm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96d73536c66b162be317fc1d4aa064de_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ