Outt
Sett
Behavioral task
behavioral1
Sample
874f1a632afd0cb0996264a8dca4a6bd_JaffaCakes118.dll
Resource
win7-20240708-en
Target
874f1a632afd0cb0996264a8dca4a6bd_JaffaCakes118
Size
63KB
MD5
874f1a632afd0cb0996264a8dca4a6bd
SHA1
ae2515a1670e3dd478768dda9b0f87ce80ff515d
SHA256
7e36d773a3233458390d645529c75e8a5e3ef39425453078d90982bc7148ae4a
SHA512
db0e0622d71c22a8516a48e00f2f3d963b32a2e3ad01f21086fe06c181965c4fef638be4aa9c01f8e7306e28d64f87a9058e838e919a31ecf06ae1e03e525b51
SSDEEP
768:d61guqcmwVeMXtL+UctJ32Kt67KLGTc+dbjwb4f3qojzzjtFFPc705QatVkZa7B4:agF0eiyUcbw0yXjtF92VQi2NfFY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
874f1a632afd0cb0996264a8dca4a6bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ