Outt
Sett
Behavioral task
behavioral1
Sample
73ee6601e8e16aa6e81a77c69a67fb3a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73ee6601e8e16aa6e81a77c69a67fb3a_JaffaCakes118
Size
75KB
MD5
73ee6601e8e16aa6e81a77c69a67fb3a
SHA1
60b594c77d885db24fad7619a7436ac7bad8eeb3
SHA256
28c58e938169deff3c8430e1cb272d38d23c11136690ce838f6cb56dbd58e753
SHA512
fee4d4b6efc5821db793788fb54199fe6ec869442d719f0c4da8cd945a0d2d61a63436d6f11bb8cee9a47f06ac76ccfda75211bba411ed95aec6455683eef0c5
SSDEEP
1536:Bm1NGJVGKNU4C5OY5jOopnTkE0Z7YHLysTMOC1aHsZW1KyfeQL:kX0VBO4fadTWZALpMOLHoIyc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73ee6601e8e16aa6e81a77c69a67fb3a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ