Outt
Sett
Behavioral task
behavioral1
Sample
d1c3486efd5609d86a3ef909056e5c2a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d1c3486efd5609d86a3ef909056e5c2a_JaffaCakes118
Size
51KB
MD5
d1c3486efd5609d86a3ef909056e5c2a
SHA1
33e8af5b32b67b0d73f7fd0b27aca73690bc1765
SHA256
321a33fc7118d2a36cf4079150011f73b9509c23e7d019200487cfead6d9e3df
SHA512
6b9ee50cfee412531996c94e9ac77edebdf3f5eeabdde53932f68a1a63819013e5d7946576a51fbd13dfd1350d92868748814a8ee08b014ee111f546e429e6a1
SSDEEP
768:hM1opOjOOfwv9d/eLloI8zj8X/dQGaiEFDSPjxp/PPDo/JonYRCWOL9I9/ApYI7S:anR8lex/eGajpSIOYRCtRITIDi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d1c3486efd5609d86a3ef909056e5c2a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ