Outt
Sett
Behavioral task
behavioral1
Sample
87015bf39d4c5f04ffd2ae95c7e325ce_JaffaCakes118.dll
Resource
win7-20240704-en
Target
87015bf39d4c5f04ffd2ae95c7e325ce_JaffaCakes118
Size
67KB
MD5
87015bf39d4c5f04ffd2ae95c7e325ce
SHA1
d93a1707fab55008648b3413bbc64e4c9b6553f8
SHA256
5ff8ad796c71ec25ae867141a5c5f5250462850e564364cb64ccb9f59050ff00
SHA512
50c46c8c7087866120271eb1ec78b61d02b1998435dc5597af1e528fa1b7fd2ec0fa2d96fa1f2b91e52f7d50f7d82d6171b93072a023c06e9955a41f1554064d
SSDEEP
1536:HKvv9jeCw6l9n+Eu2LxA5NwXZUwiTqK1MscmsIWxKyl99/SA/pmOTMJpz2tf:TSHu2LCNwUvLOQWxKyl9Rg9pz2t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87015bf39d4c5f04ffd2ae95c7e325ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ