Outt
Sett
Behavioral task
behavioral1
Sample
96b5cf120fa7506e9593849016bf568c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
96b5cf120fa7506e9593849016bf568c_JaffaCakes118
Size
74KB
MD5
96b5cf120fa7506e9593849016bf568c
SHA1
879a80489826498f48da073acad4bd7f272a0c13
SHA256
5686bf07b59f94c23422b7a364f13c9eede5421d41b95e3d932ad6ef9736cbf6
SHA512
40d97ec8b3018dc38a7a514cbbc9dd488e8058582c5dec0d990754a73a349044043cfaf49270b94441ee65bc60e5abe67f9aa0ae37282529efe99af7dfd6d065
SSDEEP
1536:soa1lMWi3EWgam+XEAxOTAfuY0GeKYCUFOwT77ObqsAUSvl:SMWi3EWgCE8OsfXVeKBUAm7WSd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96b5cf120fa7506e9593849016bf568c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ