Outt
Sett
Behavioral task
behavioral1
Sample
83242fbd4d75aa05afbf4e3397b9ecbd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
83242fbd4d75aa05afbf4e3397b9ecbd_JaffaCakes118
Size
64KB
MD5
83242fbd4d75aa05afbf4e3397b9ecbd
SHA1
00a66b868e4ed1eef4172be7ee4c03d37e5fde4b
SHA256
754f9e8d8da9df055e0f15dbb3ca4277898ceb4cc62cd29c9882dc383bcc67f3
SHA512
193422fc56546973a4827467de2b463ac59c75985e5c14b88532e6b2addc6e26db06326aba8e9820c4b05abf8ab568342c975cef7de81facb7a5410f9af2cb9c
SSDEEP
1536:Bm1NGJVGVSiHpMssJ9+s8gunhQkqOhQ+2kyxMalnf:kX0V+LHppsJ9+JhQkq/+2F5lnf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83242fbd4d75aa05afbf4e3397b9ecbd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ