Outt
Sett
Behavioral task
behavioral1
Sample
b8761c7a6f50daa22b08000eca13092e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8761c7a6f50daa22b08000eca13092e_JaffaCakes118
Size
58KB
MD5
b8761c7a6f50daa22b08000eca13092e
SHA1
4b2f7c59be47f0aa360f8c33d5f5c3f3cfdd73b2
SHA256
4f8c24441edbca43cd466524fcfc87f67907c38e9132fefd7bb3c770cbbb9593
SHA512
cf0aa54bc40251a06e8c8e16b7d3223ba430b7bb838071dddd8c20df819daedb7e52fd28813ff9315bdd940d4b25c2e466d0dcfc31025665b16391232815f487
SSDEEP
768:nbY4lct3OD6Lk/17SG/KDwKS/IYnrBxMKO2dFjMXtWQ4Bv7ZY9t1EHi1pJJIrFMT:EG2eDek/N3Mw7XvtO2UtT8v29wHGpIMT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8761c7a6f50daa22b08000eca13092e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ