Outt
Sett
Behavioral task
behavioral1
Sample
7897c1d3b2a2afe2bb74e9b1c7f5c140_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7897c1d3b2a2afe2bb74e9b1c7f5c140_JaffaCakes118
Size
58KB
MD5
7897c1d3b2a2afe2bb74e9b1c7f5c140
SHA1
6854fde71fd1ebdb7533c71536370d4c157c23d3
SHA256
064c4aea9443ea570a5c1721f97e3cb154b00af3c836ce5029f4b932710271b5
SHA512
6950aeb1d02b76ac65ad5085f530e049b11f3d0e3712f3f9b6a0afbbc56a9c8b3d5bd0dcbe5e90b522082d18de20d64e7fd6a7af31b19dafa075eed50b194e03
SSDEEP
1536:1zExMwCGQ2jYQpB2RnLVnGgJ1YVsM+HdvOz4Y5yR8K:1I+wCGv10nL8GEsM+HM56B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7897c1d3b2a2afe2bb74e9b1c7f5c140_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ