Outt
Sett
Behavioral task
behavioral1
Sample
8d37bcd8c2e9b2d5b101e66644a47f48_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8d37bcd8c2e9b2d5b101e66644a47f48_JaffaCakes118
Size
65KB
MD5
8d37bcd8c2e9b2d5b101e66644a47f48
SHA1
052ced2d40e501f83759ba77c5aaf3ce6c24d17c
SHA256
7211e55151c0b62057b6d247194c13a384e9c7d464baeaf4490413e81c845800
SHA512
77e9fd7278bd9cd7a842098deb77d32fc410f13e177683c21d942af972f2ed89a74b4a7040cc3d20e580e9d54cf7b6a4724731ef6591f3b6fd5f9b989fe43ec2
SSDEEP
1536:mPO6KEVbsVP0gZKDNXSvEhfJA5SU6wDhSt0hvh/oLH1E/uGT:cMEVbsVchXSMhf6X6w40hvNWm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d37bcd8c2e9b2d5b101e66644a47f48_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ