Outt
Sett
Behavioral task
behavioral1
Sample
b7aa8410ee837045268c42c6c47ec1fc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b7aa8410ee837045268c42c6c47ec1fc_JaffaCakes118
Size
69KB
MD5
b7aa8410ee837045268c42c6c47ec1fc
SHA1
c5c7064cfc38798fd1c56ac8eb80ce2d19a41f7e
SHA256
3c4fed61dce4f9159fbb531800e7e7054e35117c24ca648bfbfd664c7b85b603
SHA512
27348680f393add2d0dcc569beccc0c52bcb5bf326da62b67580521ec3c6506421cb30c49263b5e5277ecd6e494c439c7218223feb922e6b73866d6f92f81eee
SSDEEP
1536:mPO6KEVbsVP0gpOMIzNeZmtLIZteyUZBZU4chCAx7KOkgrH9rJos2:cMEVbsVcVdUZmgtROBZUpCoTrH9rJos2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7aa8410ee837045268c42c6c47ec1fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ