Outt
Sett
Behavioral task
behavioral1
Sample
688ec842c9c78be6a0ad0722dfbaf243_JaffaCakes118.dll
Resource
win7-20240708-en
Target
688ec842c9c78be6a0ad0722dfbaf243_JaffaCakes118
Size
60KB
MD5
688ec842c9c78be6a0ad0722dfbaf243
SHA1
aad2f0dc5be246d670681f7d4667fa0e5ed0a8c1
SHA256
97baeb3145beca5cda7d5ecfac5eaf7ef7dd2f395430516e49df03442a193fdc
SHA512
f9bd363bfc6ea08e4bbc1e5da4bd2d0802e059bbdff0c94f2df140139c6d5dfa17075af3d83664e90ba75c7bdfee98a1a40755c3831493dfca922c918a772038
SSDEEP
768:yuUr3ip/IHI7NQTvZ+0OpGdIZdCO+QadOPTyvjj86ik8EfDKb/eD+MAbqrsyYBy8:yl3E0TA0OQdEOQj48fe6MIirPXVr9e8G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
688ec842c9c78be6a0ad0722dfbaf243_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ