Outt
Sett
Behavioral task
behavioral1
Sample
c21cf85ec8f489f43d9f8c4b55c62d20_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c21cf85ec8f489f43d9f8c4b55c62d20_JaffaCakes118
Size
48KB
MD5
c21cf85ec8f489f43d9f8c4b55c62d20
SHA1
3744ac81d046aad416cddb50cfeee126ed6edd86
SHA256
50cbbc76409efb8e10d70fb8337f5047f4b43a7e186a53dc1e7b12be514301df
SHA512
4825e0b3473736b4827fab2281137a25b63174db1fb977837342327fee3e2594d649a626961d4e4abe34861e6b033cdaad802a199f698b3c89cfcd14e0293c9c
SSDEEP
768:nbY4l3IbyRaibP7srEGwVb6nrsywDMp/eBUmYT36Vd2FBQ0DsO1VLhYj:EG3IbysibTsEVbsr98adM2/LQyuj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c21cf85ec8f489f43d9f8c4b55c62d20_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ