Outt
Sett
Behavioral task
behavioral1
Sample
687e361a5c48fd6fff979d91bd08fc16_JaffaCakes118.dll
Resource
win7-20240704-en
Target
687e361a5c48fd6fff979d91bd08fc16_JaffaCakes118
Size
61KB
MD5
687e361a5c48fd6fff979d91bd08fc16
SHA1
ae215d44c6187cc20d90c1264fae8b80cc3609fb
SHA256
0ae389707c7a5f0eea4b6e6424e0de8e8a58b7579d0d7d1db5974bc1964979b6
SHA512
4b45e58127544250e6bb05eefa956d0cce73cd1098cf80312f2df6dfa8dbd3b3dbcb87b88e86c0d9d9b14556e0551c4c83f1287c08c45f0e9db9ac5bbff59864
SSDEEP
768:GbvLDaaMact8TOFzzb13rPA4orp84Xp/Y+lOqqz8K6Ye2RX+bZupFTkaKYdtEe+:ev6xzb9TAE45/bElz8K6HupF4nY0e+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
687e361a5c48fd6fff979d91bd08fc16_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ