Outt
Sett
Behavioral task
behavioral1
Sample
de89adbaf009a98da3c510237dd3c67c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de89adbaf009a98da3c510237dd3c67c_JaffaCakes118
Size
63KB
MD5
de89adbaf009a98da3c510237dd3c67c
SHA1
67cf150f372f8386fb08c844bcfe819448f02925
SHA256
48917450c0340ef47e882150910efea8d96ba16fdd1d64befa628110b8c66d07
SHA512
cc966128c8d964143688d2c04e1f975e682ab6eba8239a1cf03e22f7e129c088745cc7db0fbeb205acc33a845b5a6ed88259ce4b2d68329cdc0f3e007c2ee99e
SSDEEP
768:h8WTpVT0X8zbK2QswkZgSm27Uv+91YjBZhQbjITNSXVoA8xBLHpHcN2FnRmm4lXN:RVelswUBUmvEBbQbj7Fo7Q2Zsm4ld
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de89adbaf009a98da3c510237dd3c67c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ