Outt
Sett
Behavioral task
behavioral1
Sample
cfe1e180a9bfd69c004244145f734b7d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
cfe1e180a9bfd69c004244145f734b7d_JaffaCakes118
Size
59KB
MD5
cfe1e180a9bfd69c004244145f734b7d
SHA1
3d54d59820e08c1a7ad296d24d752c946ae17a69
SHA256
504178f296d7814d90b7f1ab4377ed56444be23f0b63685727d1a35cc5bbefa6
SHA512
e01abc8dfda9b4c8a75fc6ba185c1e85eabfb163051f9d0e2e1df1aeb4cede076a6555afe1b991be4fc90feff8eab031a939f973b8d8bde5fe3290138deacc92
SSDEEP
768:yuUr3ip/IHI7NQTvotlEmmEkuRk+X28PJ7V9bA1A/N5bAp2r30g62/z+IV5Tx6ys:yl3E0T2sIb28PG25UF1WSIkyeHKu7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cfe1e180a9bfd69c004244145f734b7d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ