Outt
Sett
Behavioral task
behavioral1
Sample
a882ec7d866f3e4e6817c62b4139cf4e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a882ec7d866f3e4e6817c62b4139cf4e_JaffaCakes118
Size
83KB
MD5
a882ec7d866f3e4e6817c62b4139cf4e
SHA1
87f7247f71ab122819ef8b05fed221908c1ee2ac
SHA256
e658e1b8a3c4265f6ad5236546c25140734d30eaf012297efbd69ad40ba60793
SHA512
5de7f80b308337078df01f34a25cb648e0cc3d5bb57e6b3224380d54f48a7c49baac8e00de95e1e0dd16dfaa82651641b5088392679025d897b8786dc1e00455
SSDEEP
1536:GQ3tfgXKVaZwUfwjnQAh2ixBgL6G7Jiu2zxImM+YaJp3vzRkCLUUbt:VfgXKVgfwLRfgGGtibxEaJp37RkCLUUB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a882ec7d866f3e4e6817c62b4139cf4e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ