Outt
Sett
Behavioral task
behavioral1
Sample
e2118548c3025d12e4b2bf4bd1c33d6d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e2118548c3025d12e4b2bf4bd1c33d6d_JaffaCakes118
Size
54KB
MD5
e2118548c3025d12e4b2bf4bd1c33d6d
SHA1
5ab82a8de120a40538a1c7746a6a0e6c0241fc5f
SHA256
56b7d6929e114de13166256ffc8853a5b08258bb3f4427784088607c5306ee0b
SHA512
fb9ee92296402a4238c753c698382edf9db4f710dda5f63f2e51b0b35c71776aec5269366891179e8f19ce1e460f4efe6090a77265683cfd4c0f3a9ffee4fab9
SSDEEP
768:nbY4lra+fhfbOJ8Xn2Z9+nZG87pNjAr63kQEBLAq9nMY3ZiuboFwUlFV:EGraYeen2ZqnDjIQEzMY3RbGwsV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e2118548c3025d12e4b2bf4bd1c33d6d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ