Outt
Sett
Behavioral task
behavioral1
Sample
8e78244ea07fa77a090c0fdd6a6936ab_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8e78244ea07fa77a090c0fdd6a6936ab_JaffaCakes118
Size
52KB
MD5
8e78244ea07fa77a090c0fdd6a6936ab
SHA1
c56a6149b119fb3acba0c4aa56f20c55de336855
SHA256
98acfa063d4b2fb9a0a1d4d0767ade7b7b8d9c49b10399436dbe2d622d05d545
SHA512
6f51be156a90aa5b0a3e22a9cd89b6898461bcfe3737f63ca1c0c845b658fc85977b7cca954a6521f58e52ffa6f6ee8395342956f886c7b71a86463c8e4d8ca3
SSDEEP
768:sI1c+XaXF7pMWiA3DqvGZitZ/9iIId44VK8ejJbcat44y6/jcm5bM+4DJIKaJP2R:soa1lMWiq+ZEIIC4B6jJ5bkOKm2R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e78244ea07fa77a090c0fdd6a6936ab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ