Outt
Sett
Behavioral task
behavioral1
Sample
8665163df95f78ea5cb9e2833a75dce4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8665163df95f78ea5cb9e2833a75dce4_JaffaCakes118
Size
51KB
MD5
8665163df95f78ea5cb9e2833a75dce4
SHA1
7d0fbc064775a9487a3d9775b67f8256e61bbffe
SHA256
f59105cc6b3b85295019c3627a79c8439cc17d30ea9e221fe4f3318ebaf360a8
SHA512
09cf41f393b8369e0ec643464897cd62ed81f66168bedfd4dfde65a7ec13542d87aff697ec72e9a65b859a1322e5a628ec17beac96c1d508273a6afa1e4a034e
SSDEEP
768:yuUr3ip/IHI7NQTvqr9MRGP//wLGrgRq5mbFAsstqnhbxJeG44RDF3372kTsf:yl3E0TCS8GGrZMOsKqhreLs3LVsf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8665163df95f78ea5cb9e2833a75dce4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ