Outt
Sett
Behavioral task
behavioral1
Sample
84f5dc0b1d82fc61605cb4e0633febeb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
84f5dc0b1d82fc61605cb4e0633febeb_JaffaCakes118
Size
46KB
MD5
84f5dc0b1d82fc61605cb4e0633febeb
SHA1
82946d31cb7f6e858b573d67f9563b22b52823ea
SHA256
4f3d0e5e83e21bafc45580ccc17fbcf0a6d35a4cbf8a9072fd1b2a3b2bf71284
SHA512
b77ad556e708eb0d0cfe066a4df47f53178cb9a82a74517c1c442e6306f4fb87c995d2ea6496639302e28c995530365842fb4970be86a86e1eb11076210ef4aa
SSDEEP
768:szM2xVVi0CLZIovBVqY15cyC1Q2Z9TidExpsejYPSwzCx+ELSzaxs2j9Q+SWj:V2bw0qZByY1eyC1FXTKExmtCRLYgsCHv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84f5dc0b1d82fc61605cb4e0633febeb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ