Outt
Sett
Behavioral task
behavioral1
Sample
951cd58f22ca8ee92bc06844e872f280_JaffaCakes118.dll
Resource
win7-20240708-en
Target
951cd58f22ca8ee92bc06844e872f280_JaffaCakes118
Size
47KB
MD5
951cd58f22ca8ee92bc06844e872f280
SHA1
9c30368d53435a02d0d745092eb05ebf1cd67fd7
SHA256
f0c078e6618d9dc52b95dc7d01ae08c2e3532897786dbb6a5fae7d48d606f004
SHA512
c3493d4266881748f8349e77f7f3b19c4cb0f89d804b4613af3444e3e5ee6a7cea549b24910a69f56a327fb28388377daf35e329c6aa2e0b02be0ab950d16db0
SSDEEP
768:hM1opOjOOfwvhg2mR6jKOLO2XCqsoLlX8Dr0wErce15W939cNrI8hO5XvnICbxTj:anRCmR6u2XCULl6r0Jri9cNrI8Y5fnIs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
951cd58f22ca8ee92bc06844e872f280_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ