Outt
Sett
Behavioral task
behavioral1
Sample
ce2657cfcedac0b0d94976bcb37f5f59_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ce2657cfcedac0b0d94976bcb37f5f59_JaffaCakes118
Size
69KB
MD5
ce2657cfcedac0b0d94976bcb37f5f59
SHA1
7c4740956f45064953b7c8d49c981adf938c9bd4
SHA256
42b142fe966bcb3e173a247b17f857607b65203d4734cdecda947a192695d382
SHA512
4cc1a3b865f2b4fa6ae775fa51f8b33543653a12e7a4d9cc5287af1d43b382215d2d4b116d2524d8e031d4689d8749251291055ea5d8d4374b27ce9cd1c1eed4
SSDEEP
1536:5jRmOlwduTB/yvGhdZ60V2TcYk+4TB2+2Ijc6XEvoNyaSaOvcOXGAZ:xfiMgvGAZ0TB2+2GNXLy1aOvdXR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce2657cfcedac0b0d94976bcb37f5f59_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ