Outt
Sett
Behavioral task
behavioral1
Sample
8b44bc8c4c03cae93bb5d0970224cc09_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8b44bc8c4c03cae93bb5d0970224cc09_JaffaCakes118
Size
51KB
MD5
8b44bc8c4c03cae93bb5d0970224cc09
SHA1
26fa9b4c8d87835d22ebfb500689167b2850680e
SHA256
03f14bbd2be1dcb4d7c384ef7052db9b21f86857c114e71e59ef1412a67533b9
SHA512
32cf0cbb1d86018d84517f50e6140fca63c0d3e3e5ba62618e3c3b5b6bd6d80623c5add761908d9ad3c475784c93c68dd2f67d8948b347fc41633e99a654664f
SSDEEP
768:nbY4lblhpywRD25jaCZQvtBexkPizzK4qREL/nMnzmsYmBfSZwf7lht:EGpyAvCO+kPizzKlOjMnjBfSsD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b44bc8c4c03cae93bb5d0970224cc09_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ