Outt
Sett
Behavioral task
behavioral1
Sample
dd2948b0a2cc0ddf4f985a0925b85cac_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dd2948b0a2cc0ddf4f985a0925b85cac_JaffaCakes118
Size
73KB
MD5
dd2948b0a2cc0ddf4f985a0925b85cac
SHA1
9b52749715f5eebcf151fe7ae77f44940ce34aa3
SHA256
3f3401f63f8eee8a7c48bd2c43bad281e0648f17fc441120f9f2742b0d0c3ffc
SHA512
da2bbad271d61d0665aaccf6ec63a1a6e6882d14aca30378077904669d27e4504775f047e82ca84f7fda6fc592edd125c1efd7073ccc888397c8d416c63482dc
SSDEEP
1536:MhBRVgrExucM6yn7/tm9/Q2z2Y0r+IMg5/lwjXU8tayAH3JCkEoZajlI1/tddgFD:cRRs4C5mhTIl5/lwTU8tayAH5lEMUWEP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dd2948b0a2cc0ddf4f985a0925b85cac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ