Outt
Sett
Behavioral task
behavioral1
Sample
8b0083476fe47b4030cb5ee90dca5e68_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8b0083476fe47b4030cb5ee90dca5e68_JaffaCakes118
Size
58KB
MD5
8b0083476fe47b4030cb5ee90dca5e68
SHA1
76dd3263b107d1f90516d0b2af2f68873d0d8a81
SHA256
1748d6f4379f5b99e1a3809780ce7be710cd7e0fe78cd5737bc6d1790837b3f6
SHA512
235b8eb020205d82e605490aa0ce4943d1547849632433d386dbad8f8be366142fc2b1b41c821e67ec4d59e4f46f2deb356acc9cd24bb01039fc27c38cbe24f5
SSDEEP
768:GbvLDaaMact8T1dYCZr0YZyAQ5QJATskKTROr6f2Avc49j+hcOmwZNDCKPeVmhP3:evBZr0YZwCAUJeAzS3ZoGe8VgxoRV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b0083476fe47b4030cb5ee90dca5e68_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ