Outt
Sett
Behavioral task
behavioral1
Sample
83fcc29526ef3ccbe103eb4b2d4d80c1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
83fcc29526ef3ccbe103eb4b2d4d80c1_JaffaCakes118
Size
68KB
MD5
83fcc29526ef3ccbe103eb4b2d4d80c1
SHA1
ae6c6ce2d9de6bcd8ed1471d37b4e17593b7dfc3
SHA256
1d5ee9c77cea9855d1a857ff689b10c22f05b40c31f621d526c97f0686a8ec2f
SHA512
767a10bc14376bb3ee8f8c22a2ab3cfbb25f837a89bf5b1f8cfa6e5ebca35877daaeb0138f1c6eba54d71cc182426440b9cf2b032e124cb225c9aa2b202b17a5
SSDEEP
1536:V8O9Nn6Rjri4vaTyY/M2CZF7g+4BhQgzf/GWsu6aDl9ppz4i7lnp:2Oz6VW4vLY+ZF7KBhT9D19R7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83fcc29526ef3ccbe103eb4b2d4d80c1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ