Outt
Sett
Behavioral task
behavioral1
Sample
85cb3046576b0dfae95cee50b80f2b3e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
85cb3046576b0dfae95cee50b80f2b3e_JaffaCakes118
Size
73KB
MD5
85cb3046576b0dfae95cee50b80f2b3e
SHA1
9b128fe0b403454bec584ccebbe5cbfb96356dfd
SHA256
5fd9cfb1df1d89ba9c9e375d4a6a01226bda762023e1bf1e0e118b8fa3466f21
SHA512
cbc3e8c2d053fdaa7bad0a02ea880e31e30ead5b9923442bdd166c744b0f47eb178f2f8f224575474a44631eee50bb44730ce8eebe61e1f3552ece63432af4d9
SSDEEP
1536:mPO6KEVbsVP0gwXRvg+P40Fao7i9dDXagP9LX+kDhCf9EeT/dpi2hcC1G:cMEVbsVcJRo+P40H7i9dDXhP9bQ9EipA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85cb3046576b0dfae95cee50b80f2b3e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ