Outt
Sett
Behavioral task
behavioral1
Sample
b8b63c514aba3d36faf52c9e4b065699_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8b63c514aba3d36faf52c9e4b065699_JaffaCakes118
Size
61KB
MD5
b8b63c514aba3d36faf52c9e4b065699
SHA1
1c2013538f7468f04878f06f9445fafbf668a254
SHA256
315fd62619bdf7b4d942ff06025db07519b5571bb2fa87024d423c92093fa230
SHA512
ba8cc78489fd5898ef548b5ad7561cd11c9e47da267bbf9e2ffe88dac22e533b2ad10fadaf09ee3fd9972d981efda19a3569ff894e20b4a7a7b96749a926730d
SSDEEP
768:Gx4m7JNSll3dTG+JC5QkZ2yj7tRMcIlcJUjRjpZnIGc/OQ9YgoDN3NMvFn416pTn:Bm1NGJVGaCtPjBRMlcQRcVmMtu6tHG2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8b63c514aba3d36faf52c9e4b065699_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ