Outt
Sett
Behavioral task
behavioral1
Sample
8b2e10e2ccf52817e1930e5a24ea5a16_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8b2e10e2ccf52817e1930e5a24ea5a16_JaffaCakes118
Size
61KB
MD5
8b2e10e2ccf52817e1930e5a24ea5a16
SHA1
f4b2f651731e3504583d726e79d40ea3d9db7b97
SHA256
16ceeb5fb10bb3f5ea416731ad90586ab24be8251072d831de3c6ad8af69e204
SHA512
79074d70d7a014b1a1df0f3baf980d9e6c8bcb55a52bac9594ca656aa5ff5904195b24cb8d8d8106919326fbc5b84b9bf09285b1861f8b3aab789061b0e3da59
SSDEEP
768:yuUr3ip/IHI7NQTvqETTmWe9vt5FuGIKKNsAi01UPqoSzFosQzZIBBlHIzJQs9FW:yl3E0TDWWef5Ki0uP0zFoseKpIzi8sR/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b2e10e2ccf52817e1930e5a24ea5a16_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ