Outt
Sett
Behavioral task
behavioral1
Sample
c047c6ae4ad99ec961f1ef1f39a0c75d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c047c6ae4ad99ec961f1ef1f39a0c75d_JaffaCakes118
Size
56KB
MD5
c047c6ae4ad99ec961f1ef1f39a0c75d
SHA1
62452adb91b55dc382013d1c662536e0e09472bd
SHA256
1465cf01bd3c77ce61f7ba27f3a57bfc76bfb8ad5f1e118b2abbcc80924d2ee1
SHA512
45495b3edb1995bf1f6d298a67b5c2f52b61b9116edd44b8d3a2bdf9352b27f85d978db92e1a81f953985c55fb57b014ee26a1b2b10a90efb1f22d6299464244
SSDEEP
768:nbY4laHslswOunLubpIUTQA+p4Uu7/KCyb+6XLZVaX+27kjXpa2oM:EGaHsmFunLudFUu25+6VM3k7paA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c047c6ae4ad99ec961f1ef1f39a0c75d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ