Outt
Sett
Behavioral task
behavioral1
Sample
7368823c5a3d0f4eb9dd0a7eee0f8b85_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7368823c5a3d0f4eb9dd0a7eee0f8b85_JaffaCakes118
Size
56KB
MD5
7368823c5a3d0f4eb9dd0a7eee0f8b85
SHA1
33fb02709f184de88c85696d98d481cbe63c2f7f
SHA256
35b0f0ef5c0c2270f0cf939bb549a01abf61c12ccc17446f17341052fd745739
SHA512
f573ef6331c8169ecd301cf1d5d4899b31c10ee4a38a89d2cc89a7fbb4aab2207180ba98552c02e5897ad999e96b82bd9984475eae3bd22feddc9344ab183fb3
SSDEEP
768:szM2xVVetMW5CidKiOvL5EbOJPAF/M4rEWKKNIyzKuAZtV41mxu5oYEyJx1YX:V2b+MsdILJAF/MCgKNnmsrCX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7368823c5a3d0f4eb9dd0a7eee0f8b85_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ