Outt
Sett
Behavioral task
behavioral1
Sample
a068ca1f1b2c10da35f8d9f141fdf5d0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a068ca1f1b2c10da35f8d9f141fdf5d0_JaffaCakes118
Size
73KB
MD5
a068ca1f1b2c10da35f8d9f141fdf5d0
SHA1
07b8314551f7587122395f7b1ac1cfa48d06585a
SHA256
02ee74175baf8f239916ee8076a0f499dc52edc2cd87fb85bd68421029fbd3d6
SHA512
85313e8bab682df05d35a8185656314fec776010409e474b2ee24837b8d7d457e877db776642b8fe375da23aaeca4455c9ecf705feb6aa7d00cd423e1ff4c758
SSDEEP
1536:yl3E0TFSqToGAFD2DTTEhte0qV7F7umqYBO9uzf0kndxbgxh6:E39vTeR2Gte0qV7F7umqYBO9Oskdexh6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a068ca1f1b2c10da35f8d9f141fdf5d0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ