Outt
Sett
Behavioral task
behavioral1
Sample
dc6ab03f01bdae9cecc0981a7da0ebc2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dc6ab03f01bdae9cecc0981a7da0ebc2_JaffaCakes118
Size
49KB
MD5
dc6ab03f01bdae9cecc0981a7da0ebc2
SHA1
68b5b3439daf0609bc5eec7bc12ffacc0dc54dcf
SHA256
4298150cde71015a1dc794ea7d13684f446f3ea51d87323e88a5aa3af769e331
SHA512
f855ec5e5bf1424fdd2fff9fd53501327019ca09817e359ed4bfe248f4b7ac3596ee7c02c3fe62d9cd30047dea023b5701e2ee5dc58246a021f252314d243886
SSDEEP
768:cpgVGR3FgShFL+D+Jx6hQgeNEfyLZZAZsh/8hFc+ZDoTygxRcR+tS0+8bZLV6UW:OBRVgrExucMXZs+rZDoOsttSpwZLkt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dc6ab03f01bdae9cecc0981a7da0ebc2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ