Outt
Sett
Behavioral task
behavioral1
Sample
d66ae88ca59a10a1b9d340b84945d6c8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d66ae88ca59a10a1b9d340b84945d6c8_JaffaCakes118
Size
78KB
MD5
d66ae88ca59a10a1b9d340b84945d6c8
SHA1
90a598688ba447cdc17dd2bf66128ecdfe41c1eb
SHA256
4eb8449af84e62c5d2706cf779e57b700fcd309306841b362b2134fdf0be9a01
SHA512
9ae3b77929380577ed004ec995c2590b328c0ed3feabe11e0433dc00b548f966e7ca7a303035d6a63ffbcae65e5baffaa924a229769ed1a4e7835addce4a4e65
SSDEEP
1536:9OKkqO8/W6kyOuibbAqAW1uwbUR5E52WLOA5:sXx6kDuNW12K5DLOk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d66ae88ca59a10a1b9d340b84945d6c8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ