Outt
Sett
Behavioral task
behavioral1
Sample
e1469bcaae4beef4a805c85d76c10c20_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e1469bcaae4beef4a805c85d76c10c20_JaffaCakes118
Size
54KB
MD5
e1469bcaae4beef4a805c85d76c10c20
SHA1
bf1e766d00837bcc61331a6b4956f3694d78066f
SHA256
27e07126833fe6e385167ecab0942d8b89030dc6be4bda5593b1743cf982b07d
SHA512
d394767539ef4ef173c9980c7b1f50f8f6d4f32d30331cdf20a56daaae8febfa281debd912a2c40a94a1194cbd96b1c53a728c5c111afef25c188f75115a09be
SSDEEP
768:Gx4m7JNSll3dTG+EcpfjI31DAKCBD5Y+EQY2m2Z1MEUpykwpauMpGaByGsx6AqOP:Bm1NGJVGemmDLVfY2BzyAwVA1baAd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1469bcaae4beef4a805c85d76c10c20_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ