Outt
Sett
Behavioral task
behavioral1
Sample
a6b23703fd40ed51368a9427b76e14b1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a6b23703fd40ed51368a9427b76e14b1_JaffaCakes118
Size
57KB
MD5
a6b23703fd40ed51368a9427b76e14b1
SHA1
03a19ced5c34ed82a6cdf5e4ce6f897b725f383a
SHA256
6c807fb06230f4a8c4fe45182ecb2b62558a36b7acea660ab57ce5dc2481d888
SHA512
d5ab48819484ad5c73f37bafef33d7d0fdb3cc34f4a077114c7a864a0a0612b6e1e186568b3851951bf2ad06cc1237815327e9b63c62a1df1c0896611622c30a
SSDEEP
768:h8WTpVT0X8zbmX6Na0lal1wzwXw7UFgDrP5Yu8N4+7/IEi0V9L3wvRDOBhMlHjJj:RVexfWUFg3P5YNT8zcwJaM6F1Z4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6b23703fd40ed51368a9427b76e14b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ