Outt
Sett
Behavioral task
behavioral1
Sample
82f44a2fdde9a0a1e5f2eb64a852e181_JaffaCakes118.dll
Resource
win7-20240708-en
Target
82f44a2fdde9a0a1e5f2eb64a852e181_JaffaCakes118
Size
59KB
MD5
82f44a2fdde9a0a1e5f2eb64a852e181
SHA1
c75a6de14be13878dae9be5dee39f500ea4cfe31
SHA256
42abc8b009b51f9b372b606f0d78de2c951a2f79ce5cd4808ea4564c86178fe1
SHA512
76cf82736254111cea0c43faa914e4b9439730a0f6c1eeeabdae05b7d00f2965d245fe9df56ae7a8b052d315066d67aa615e5c975a794aefa45ffa8d9c0c7a7f
SSDEEP
768:9xBtKtqyLUmSJ1S5u8pX15qL19YdSXrmKSrUmIS6PhqIw48b3vXOhXILSAiqeHC:9USjYu8dqRqcXrtD1pnz8b2XEVUC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82f44a2fdde9a0a1e5f2eb64a852e181_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ