Outt
Sett
Behavioral task
behavioral1
Sample
97453bc37ca8f271f8b17f8c20f0644a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
97453bc37ca8f271f8b17f8c20f0644a_JaffaCakes118
Size
66KB
MD5
97453bc37ca8f271f8b17f8c20f0644a
SHA1
2a1ac2b36674483e44d21cf952ff196d90f727e8
SHA256
1991a8cadb6d21aa3e79a98df17c134d9a91a26b19068e56c882eea0c64fe5d1
SHA512
fd5e63976ec5ddafb530331a10e3a68d4818cb48faceb765a34791618dcd6d342869400aa2acc19cba21015746fb35cd60de1e2473bf3bbd9901d6f75e5fafd7
SSDEEP
1536:1zExMwCGQ2jPANwZw9Qwk5Y4tnNnj28wQyF+dgYnZ5n3gLsbr/M+Z:1I+wCGv81kCAnjEYeW13gLsbjd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
97453bc37ca8f271f8b17f8c20f0644a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ