Outt
Sett
Behavioral task
behavioral1
Sample
8b6ddaf9b5e34dd985924cf60509d589_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8b6ddaf9b5e34dd985924cf60509d589_JaffaCakes118
Size
53KB
MD5
8b6ddaf9b5e34dd985924cf60509d589
SHA1
25703417d2093215fcf2ed0d6bfb1e48c2f622aa
SHA256
1d56894338a508b09f2c685d16a3d6ba2909cd5b0ccfe194f7db44679b2a71d1
SHA512
f64e760bff578411f75448e87d38fe3b9df9a271385e5d0ce07b22c58bc0a4145aa4330d2186072d4da69d675103a2e4bc6430d13bd56e15bcdf67276663b941
SSDEEP
768:GbvLDaaMact8T4gfbQrnS+z8249Vrj2EHvAuihEooIbXlhGJhKa5k/LGk2VsiqzQ:evkAuf4XrjfRi1oIDHWA9/LGYig5IP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b6ddaf9b5e34dd985924cf60509d589_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ