Outt
Sett
Behavioral task
behavioral1
Sample
73dd1c9d9bbe9c15f2bf4266e383b88e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73dd1c9d9bbe9c15f2bf4266e383b88e_JaffaCakes118
Size
65KB
MD5
73dd1c9d9bbe9c15f2bf4266e383b88e
SHA1
6b84586b1d6461f6f520bb49a287cdd257f2c7fb
SHA256
030f99b5fc7022ffecd4d86d1b6d67a039761d61edff36834fbcd9beafd78035
SHA512
21fb1cc6dcf3554f4e5dc9f84e5a4e088ed0e46e3ff880b0c195da1b27a7ca7ee0a33d0a246c7607275c7b21b4867c40973ca3d8d0795ec074abef7bd5673f40
SSDEEP
1536:5jRmOXDqicToGvqf6znDVWTFaDi4Dr+II7MJTQfqBlg:xfXDdKyKUIG4Dr+SpBlg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73dd1c9d9bbe9c15f2bf4266e383b88e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ