Outt
Sett
Behavioral task
behavioral1
Sample
83bf21368b424e5cf52dd61f2c9d3e73_JaffaCakes118.dll
Resource
win7-20240704-en
Target
83bf21368b424e5cf52dd61f2c9d3e73_JaffaCakes118
Size
72KB
MD5
83bf21368b424e5cf52dd61f2c9d3e73
SHA1
502f11bb7ccf6bbdb1bcc1f2f9cac72317975083
SHA256
9f76d4a20bea56ac171c97bbca8a7d85b295d8fb96a98a80eae63c9b3d40d5f1
SHA512
36cf25ccd2213edb9d2dbd2d8161d573abbeae60983474fb505a4d90d7badc292a137c72b001359627fff9788c011164dbe6b056b04b0e52916d2248cada35e9
SSDEEP
1536:HKvv9jeCw6l9n+Eu2QGlUe93Kp6YRfsRpKv9fM4x8c6/eHgQAlYJlf:TSHu2QGezphRWI9XN1BS2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83bf21368b424e5cf52dd61f2c9d3e73_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ