Outt
Sett
Behavioral task
behavioral1
Sample
b9b93550286e68a7f53ee7b4efc588f9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b9b93550286e68a7f53ee7b4efc588f9_JaffaCakes118
Size
76KB
MD5
b9b93550286e68a7f53ee7b4efc588f9
SHA1
3f141b96676b7a76581b0191fff7ca026cae7739
SHA256
6c8dadd4292237aee4bb1c98b2a90092a78941a65737e7d2ed80a8523f82d901
SHA512
cfbac2342c1ca909a51871857a2e36baf8e884eb7003513120352a9f0efceeb59ee52f346dc74abbade14897014164ebd1c0836aae16f86a926081ff3d898118
SSDEEP
1536:mPO6KEVbsVP0gZ2y5eMS3OylPn09GhHUkRslvBAmEqKWEtwne6D03G3u1s7xaEyc:cMEVbsVc+5COylPnrhMlv5EF7eDH70EZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9b93550286e68a7f53ee7b4efc588f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ