Outt
Sett
Behavioral task
behavioral1
Sample
a750f7e71a82e691eab57eb7c5dfb7b3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a750f7e71a82e691eab57eb7c5dfb7b3_JaffaCakes118
Size
64KB
MD5
a750f7e71a82e691eab57eb7c5dfb7b3
SHA1
2975ac9e19ddab79b5a73cdcefc12cbf5f0e0860
SHA256
a30bb3650de64cd2e971dd15514cc05b0e9cb8fa6cf1071a2fcb5e34bbb1a3d8
SHA512
e9c230349e7cb8de6528d06f72e9c9b81e81b1d669778d8b04b863b1c57ad218b794e385a550cfa165487e401bd2dbf702a961ba1446e129d45c9220e27a8eca
SSDEEP
768:nbY4lkQvKmkbCtQ8sM3UtB5J7g9CIR6nFNGGqqKeO9bukO1BeSTJ33P3NbFjPnz:EGRSdS/+/gDReGGAI71BeSNnP3N5z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a750f7e71a82e691eab57eb7c5dfb7b3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ