Outt
Sett
Behavioral task
behavioral1
Sample
d5fcd90967464408bb12d1a7b7d8fbfc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5fcd90967464408bb12d1a7b7d8fbfc_JaffaCakes118
Size
38KB
MD5
d5fcd90967464408bb12d1a7b7d8fbfc
SHA1
2f2461e61ced88f4360ff856e4035c6395c699af
SHA256
2bef7cb2cfa0283d69e011b32d6802af5cd55b5ed9e652d4fb38375720ec74d1
SHA512
2741e6cde97c4eb922b4d6f6dcffdf1c27594f44a2f04c7971fd892d4f7f75ec75c7f59a7a1364e2d5da5c9c598b226de0b423c884da8a3d3cb8be3ec578a36c
SSDEEP
768:GQxrhypDESkRA0HVCzXrx1KkvecQ0UR+b25w3sOZ90YjD2DqYgwvWOc3UQBTtD:GQ3tfgXK/GUOs890YjyDvgwvncE4D
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5fcd90967464408bb12d1a7b7d8fbfc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ