Outt
Sett
Behavioral task
behavioral1
Sample
c95b1e216caa4936e93869706a5cf08a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c95b1e216caa4936e93869706a5cf08a_JaffaCakes118
Size
59KB
MD5
c95b1e216caa4936e93869706a5cf08a
SHA1
7fc7c63b4494e3a68d0faf0e3f7fb75cc6836cdb
SHA256
0084441a174c1a1d97eef0a6a1b759377b98a71207e86936e97a03a3e0261734
SHA512
f3bc721b5cc0ba37ba430ca375e60db3c9fd8fe0d7123bfa83967cb96d133b6609ddc3a78bc72fcf6ccc12e83732122c61bf9100135bc48488d252163ac29efc
SSDEEP
768:MvpgVGR3FgShFL+D+Jx6hQgeNEflfLVWO+pMrvMRpYpKO0KDkVQo3OWr6jIdkxt2:MhBRVgrExucM9L7PvCqpK7eiOCixwEIt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c95b1e216caa4936e93869706a5cf08a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ