Outt
Sett
Behavioral task
behavioral1
Sample
d498a043d4a8199e0d8fc969940cf08e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d498a043d4a8199e0d8fc969940cf08e_JaffaCakes118
Size
49KB
MD5
d498a043d4a8199e0d8fc969940cf08e
SHA1
d9af56ff8e2c66f09a384968a012ff9e2e2595ea
SHA256
562e538a0937faceaeeeba947524f295d584ab5aaec110504acdce5b1f38aa1e
SHA512
095eed385e78537b5be2fa26008fa6c69e5c1870abf2fea64981b71eb0105da6758f513f4373e428fcbdca08f65d19d60b4b39d604a96e7a96983ca3b0887d62
SSDEEP
768:0sZIlOe1SCkLOk+ZWXbV4ffTPCb3scSk7Z1jK5WMV1YWAzEy4v8qLDwuf:VZIcCxR5f+Ls8zKsMxMov8qLDwuf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d498a043d4a8199e0d8fc969940cf08e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ