Outt
Sett
Behavioral task
behavioral1
Sample
a73ab8f937c64d8b9d80479deaf8e5b1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a73ab8f937c64d8b9d80479deaf8e5b1_JaffaCakes118
Size
78KB
MD5
a73ab8f937c64d8b9d80479deaf8e5b1
SHA1
aa977d746a809d80238fe6a9b1c00d5582cbce50
SHA256
bbd80e6388c97ff52c718c28e035eea9812d0385ab89a824e4b76c22cbe575ce
SHA512
7e7cf8c5d11489a9caf0697af6d675769648c779376cc12f18d150e1c52b72a3ced02bbdd9236ebbb80b8e971a9efb189eb42e82e35e03edc63815a531709760
SSDEEP
1536:YJEu0nVK+SBjf/cUbMEbRzdCvnA+b+yZfm3fx6s3PpAhiaeU+8IKh:YmJnVKffhbV7YA+yee3fos3Ppmr3uw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a73ab8f937c64d8b9d80479deaf8e5b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ