Outt
Sett
Behavioral task
behavioral1
Sample
96fdeb3b64967bab8eeff28d0a03faf8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
96fdeb3b64967bab8eeff28d0a03faf8_JaffaCakes118
Size
66KB
MD5
96fdeb3b64967bab8eeff28d0a03faf8
SHA1
a232efd3675e3e7e7a989956fca8785329d2ae41
SHA256
64b9e32adec98604fbcb37546fbad024b5131084bb1f8e4ae32d32bb4d27a8f0
SHA512
a4ee902563a878043d27aaa00eb74bdbbe7c71bb03b051c64717e8d5eb8521b3169d3a42e0958e24e84248a2ee70807ddf9409835f7fbd962205968578e457f5
SSDEEP
1536:2LOJMXV6rtIcHRf1dE3eYsV1ISX3gbFqJYBT9bNAp:2rkRJL0eYsBX34XBTZqp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96fdeb3b64967bab8eeff28d0a03faf8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ