Outt
Sett
Behavioral task
behavioral1
Sample
9728fa2974b12600a1f70ddfaee47c72_JaffaCakes118.dll
Resource
win7-20240704-en
Target
9728fa2974b12600a1f70ddfaee47c72_JaffaCakes118
Size
59KB
MD5
9728fa2974b12600a1f70ddfaee47c72
SHA1
850a336dbe68ab5d4aac7f2f890873bf08ed5a18
SHA256
26b0f8bc10602167244bb4f021a0e0b340fc2fb80a21e48d8e7b7e271b1aefd4
SHA512
93f2a50cd603bf1e71b46593e76bcba91727044fc38618a6afe2279ad0c0cfc4709366ea1212c2b2e5aa463390acf919d88858aa9f5ae6f6421623367f0edc0e
SSDEEP
768:nbY4lNpHzXYhHFFYdl9x4nx0xSpk6T6YRaDdS4G/W69kE3hOj6Nm/g8HZ3uNMqte:EGDshk1zxSZTXl4x6RIj6I+C2ejlzN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9728fa2974b12600a1f70ddfaee47c72_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ