Outt
Sett
Behavioral task
behavioral1
Sample
893f9c6c57ea166cc9ccb9205da1bb3a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
893f9c6c57ea166cc9ccb9205da1bb3a_JaffaCakes118
Size
69KB
MD5
893f9c6c57ea166cc9ccb9205da1bb3a
SHA1
099cb744253aa4d4b5951a3d6ef82f5ecb85bcf8
SHA256
607a359a1d9c92b40bc813fcb73b044d799330d185cf20c484e8b9d1ecba3203
SHA512
b7bb792b5754132ffbb262bafe6f8edfc115a6ed74025bfdce5e27b4c1d0948e91703dc7f53f1fab06d901059ba7642a32fbd613e2bcad067796ea1a9da7ff6a
SSDEEP
1536:GQ3tfgXK9/Ay663guNzY09JYp8dshNQq7S+nHSYEfQfSmF:VfgXKRn6lueaSm+jS+jXfSmF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
893f9c6c57ea166cc9ccb9205da1bb3a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ