Outt
Sett
Behavioral task
behavioral1
Sample
b04b5bd25a6544e15ee68a14e7ffc990_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b04b5bd25a6544e15ee68a14e7ffc990_JaffaCakes118
Size
53KB
MD5
b04b5bd25a6544e15ee68a14e7ffc990
SHA1
a91afaa8143a5b9f5d385c39cfe720d85f9c5d4c
SHA256
e087e479a346849e3c8796797ea23c3d19ad7710c115a7313efe6e6f86063b58
SHA512
a0a4522d303175b10cbb5dd8b6126be8f2223d2b2da90083a7a3da790aa2aecca9463f988cea0b9bd0054bff8b55a795dd7a447ebd68872b8571810041c0e6d8
SSDEEP
768:h8WTpVT0X8zb8gS8HTCboLpdpRUlY/iGQ3J2H9BniMjLMgCtrEdt0phjp6:RVog7HTsadhjsMzLz0rE0fs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b04b5bd25a6544e15ee68a14e7ffc990_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ