Outt
Sett
Behavioral task
behavioral1
Sample
8b7383cf3c9f2e7afb97208b5c5d6465_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8b7383cf3c9f2e7afb97208b5c5d6465_JaffaCakes118
Size
52KB
MD5
8b7383cf3c9f2e7afb97208b5c5d6465
SHA1
a82ce6bae5835a87e6f219b6c6d911fe8ccf790b
SHA256
053a2a81c88f327127eaf14938856198cbe8de8a48a4e9c5bdb8ed07aa2f8c0d
SHA512
18a657e328a4902b5aac79192a043739025dc7a0aba86cdd6f363fd02e74771998a9d9f73dd1990dcb5f6ac86d5cf6c77dc4a93bcdbff1212337d57ef35a0980
SSDEEP
768:yuUr3ip/IHI7NQTvN4SAigdWG0KWdSre/44mNKXV9BKvW7/U5sbXnJiyNiv3tmHu:yl3E0TlXgd0e4ZtIWfznJiyNiv3tmH1M
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b7383cf3c9f2e7afb97208b5c5d6465_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ