Outt
Sett
Behavioral task
behavioral1
Sample
96ee97523655d62aaa850b8376b8a5bb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
96ee97523655d62aaa850b8376b8a5bb_JaffaCakes118
Size
48KB
MD5
96ee97523655d62aaa850b8376b8a5bb
SHA1
2299704a92d7c28e3b0553756f27dabf37dc9fd7
SHA256
abf0401ee3694a220350308421b8321b982b58f8e4bca6c607bd2e60027207a7
SHA512
e1b898d8e49421428abdd31c88b86148b4b4da23b6d4979a7eda924a009191388da110b939c54e17d3dd3ea2caa9a523b893ea5743e0d57822a168fae5bf0778
SSDEEP
1536:V2bo0mkXkPrmKlcI2rsxrF4DX8yhmq/XoyV:Wo2UTrlhs78ysq/PV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96ee97523655d62aaa850b8376b8a5bb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ