Outt
Sett
Behavioral task
behavioral1
Sample
72d2f7bddd3faf4dffd96323cc1ea3bc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
72d2f7bddd3faf4dffd96323cc1ea3bc_JaffaCakes118
Size
70KB
MD5
72d2f7bddd3faf4dffd96323cc1ea3bc
SHA1
76bcae5b2a1b88ec75fa7bd4a40907ecd709fc52
SHA256
ceb59ef9de5475f50e3d69c125adbc05d0ef92e2c0dc6807043d8cae0368adcf
SHA512
02fb967cef5d40bd948d4857f2e8965853c91af0a9a86e5c100f7f115d0bdfef004edc0289726101b9852bc1f6e01e614cda94a72545805d23bf9da85dde1840
SSDEEP
1536:agF0eiyUcbqcQJJc50YCjN/rE+QsJ4aAM9VS5UsaCjr5B5QD:t2yFOcQQuYCR/44HAM9YCsaC/lQD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72d2f7bddd3faf4dffd96323cc1ea3bc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ