Outt
Sett
Behavioral task
behavioral1
Sample
85b1a6136adff3e3a77e43879f90c11c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85b1a6136adff3e3a77e43879f90c11c_JaffaCakes118
Size
53KB
MD5
85b1a6136adff3e3a77e43879f90c11c
SHA1
359249bc4bd01a956ef580719b84d1290bab9d17
SHA256
16c9e6578b149c6b1979b8a5d065a5d2053d2777179f2798093d44c941121a72
SHA512
bffc2efc3895605ba3eaa70ca1296451582194151e015ddd51da4bf0dd6051fd2ad73796ce9887ceb500c60e8a08a95cbfb33b51c0e06d52c00c2961664d5635
SSDEEP
768:GbvLDaaMact8Tppbb+iAWQ1U0h3kZn2Qi6SkecB+LgfPxrxHloyw7h5CHpL79s9:evtNbPAWmVho2QiKXB+LYJzEh5CR79s9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85b1a6136adff3e3a77e43879f90c11c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ