Outt
Sett
Behavioral task
behavioral1
Sample
ea234f5c315d635ab11fa1c15eac5a7c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ea234f5c315d635ab11fa1c15eac5a7c_JaffaCakes118
Size
71KB
MD5
ea234f5c315d635ab11fa1c15eac5a7c
SHA1
b96a23c3cb3975c0dd595c12da6ef68b236c19ca
SHA256
34e3fb39bb17fb41db26b11328129ad7c33facf801c82b5d08d04235d9ce893c
SHA512
d9c6ecb23758c9e57fe52dd8f8167a7bfcae9ee1a1f48128a116c21e23eebc9e710c0bdc53d2f5f67ed561fe4857ed31002173616bd3dd18847efc385cfe9d6b
SSDEEP
1536:EG9m7+dB2YP3Ccqgt4tQ8qEgJH89E43vC/UGSZvaB:EG9m7+dB2YW8+dEwEYK/UGSZCB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea234f5c315d635ab11fa1c15eac5a7c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ