Outt
Sett
Behavioral task
behavioral1
Sample
9522c1ca078b65b03b0d672c1f97339a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
9522c1ca078b65b03b0d672c1f97339a_JaffaCakes118
Size
81KB
MD5
9522c1ca078b65b03b0d672c1f97339a
SHA1
bfb1169cd9581aa7c795c8661ffd603306ed9520
SHA256
aafc94ed734944814928387949502cbb6a3c04ec455168209399c76c02d8baf3
SHA512
e4f4fb04a79e7f6a6183dfeeae4cd3e0d0205465877e768ee0dd924c4d08306d176e30325d3eaa6a7f16068a3f8b57baaeec17a331b13b563e39010429f600f4
SSDEEP
1536:5jRmOawdoYlcC7xmwyWbtKIgBZhYOlNGc8UP1+6D9jCalg8Zk1IXrEBXu7o8:xfawuEcC7IwfHgBZhTlNGbUP1BjRlLgo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9522c1ca078b65b03b0d672c1f97339a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ