Outt
Sett
Behavioral task
behavioral1
Sample
8d7c039a4c7f4f3c4414fdfe3c0e854b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8d7c039a4c7f4f3c4414fdfe3c0e854b_JaffaCakes118
Size
49KB
MD5
8d7c039a4c7f4f3c4414fdfe3c0e854b
SHA1
70095169b05bae3fa620e4c553c296194131f1ac
SHA256
fd3b9ad7644bbd8f6ca20b2ced63c2cb6c41602a0d8edf7a3c5141241b6942bf
SHA512
e0d105dc5730e808451bd5b1ff10be328cb4ddcb98b504ae27f90ae675ed774d1d95aa59a37c97c21409a1d0b025fa3a9a1cf5ae837e8a26552f3f4d936cfb32
SSDEEP
768:KsZIlOe1SCkLOk+ZWXR9gBUQHiP7dkHBVGypj+NwFlTW4AMBRG5PFAPtiQvVuILh:jZIcCxRsSS7ajGI+WyE1PtiIVPkC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d7c039a4c7f4f3c4414fdfe3c0e854b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ