Outt
Sett
Behavioral task
behavioral1
Sample
c76a8b4a13fa4c7f213721a458956708_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c76a8b4a13fa4c7f213721a458956708_JaffaCakes118
Size
58KB
MD5
c76a8b4a13fa4c7f213721a458956708
SHA1
efc0279c7dc5401d1fdd23aa2c71e1f70ddc6b05
SHA256
53db744ee9641b3371e91310c3f9ea74ace8c1a6574f484b1d14cf0767d5814a
SHA512
6917e8e7a567c4cf27440b0694232511a97b6fd6aec587b46479327215fbe31bc65bf955956fe3c5452b3a93155fe85271403b959832980ed5d773892c3e7ed7
SSDEEP
768:Gx4m7JNSll3dTG+p1zh5rJSbEvSAIZVEklcUC92TFBUiHCIqsBSnn7ttOgd:Bm1NGJVGU1NhJEiUZVEkOUC9NqSqgd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c76a8b4a13fa4c7f213721a458956708_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ