Outt
Sett
Behavioral task
behavioral1
Sample
96daaaa77f4282c22007aed3fc00d8a5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
96daaaa77f4282c22007aed3fc00d8a5_JaffaCakes118
Size
65KB
MD5
96daaaa77f4282c22007aed3fc00d8a5
SHA1
d9d04ccabfb3ea4389e3849984dac04334f3ff5f
SHA256
4db6df75535b401c68a6bc29771f40c6ada8fade88c68607bc1ef5ae44c83302
SHA512
918eee6f14fbc2a525c119fd0db7b908668faa28dda283b89e38145c4ca48f3d00e95a2f39cb0b8bfbeb5a0ce8c823592c210b9ac98e3b04a90354d6162f5f46
SSDEEP
1536:yl3E0TnaisPpnW288D7fzIbsQJQrvlMX24wwzWExX:E39ZM7fzIJQhnWWExX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96daaaa77f4282c22007aed3fc00d8a5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ