Outt
Sett
Behavioral task
behavioral1
Sample
c0ce556f1fa4e905c4a4eb91a6816ecc_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c0ce556f1fa4e905c4a4eb91a6816ecc_JaffaCakes118
Size
74KB
MD5
c0ce556f1fa4e905c4a4eb91a6816ecc
SHA1
b360c13ba4e7a9419fcf7c4513cc2c06e8879c6f
SHA256
4a44297b78e4d218d9254cdf6aab8cbd1e60d85a0a7a0d751766fd51276d841f
SHA512
7039033432d41f0ece291ee6df542650397f9fa28258b4922e2fac2cd5780fcfe3052218ea662e3aa46ae6485355de2aea2175a842023945ed6d467d28e07280
SSDEEP
1536:MhBRVgrExucMcQY2qD/AuC6mEWkVIz0J/3pcY6ARrBOpCXf5T:cRRsbCq6QkKc35R1OCXfd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0ce556f1fa4e905c4a4eb91a6816ecc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ