Outt
Sett
Behavioral task
behavioral1
Sample
73517e196d23cc0d509fb37ee7f1d98b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
73517e196d23cc0d509fb37ee7f1d98b_JaffaCakes118
Size
63KB
MD5
73517e196d23cc0d509fb37ee7f1d98b
SHA1
22edb9ae3e5b330a1085b624e8271cbcd5f0ef2a
SHA256
33f00fd872828b083ce8d0b13478a906d5c8f01bc255a29c5c299eea75d43cc1
SHA512
b538bc534cb05a444fb41bb7186ed1b7f4e94bc4a0044b3c718356ffe4fd5d5e6f4c7e08a81479e08f4c9950cb7eee8ef58d3f8502e43e395b4ca655eac1b2be
SSDEEP
1536:VZIcCxRE1UE7Nv9dtvVO8FOdjTZNQfPt4XQ9YbqYrDVW+IY:r+CUWNT0HXQ+Q9AdW3Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73517e196d23cc0d509fb37ee7f1d98b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ