Outt
Sett
Behavioral task
behavioral1
Sample
483a73a54781ba9880ce3c9a3b1f6b7b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
483a73a54781ba9880ce3c9a3b1f6b7b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
483a73a54781ba9880ce3c9a3b1f6b7b_JaffaCakes118
Size
63KB
MD5
483a73a54781ba9880ce3c9a3b1f6b7b
SHA1
3e1ae9be218665ad6c3f6c0fada8c3f06cfb113b
SHA256
20ee05de27d52b89bb3fbdda6b1b29c5b886c320b13539db22c2f2a13845728b
SHA512
1ec53d8bd01ddf09ad513ed65cf93d07ee620dd46ca873d58768c9e09a2f0ffaf9f63dae3a2f6ed19ab90c2ac397934bc3f4766d9005501d3099f3f9c9409f0f
SSDEEP
1536:EGjTaCCvSoeVbxKNZ/LHobJB9cf3z68nWa:EGjTa1BjNZ8JI/e7a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
483a73a54781ba9880ce3c9a3b1f6b7b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ