Outt
Sett
Behavioral task
behavioral1
Sample
ebf6fb23b195e7e089829f9e593cf722_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ebf6fb23b195e7e089829f9e593cf722_JaffaCakes118
Size
61KB
MD5
ebf6fb23b195e7e089829f9e593cf722
SHA1
f3174f448761e06ddcf1049a67534a7738de67aa
SHA256
d5b4f006760f7763602146784856022446b5968cac4f9fca8695701bb6f70e74
SHA512
e89039642fde1f749ddffdc12257da7e5b7808acdd9413b0ab00edbe590c332bfbb96658f33a8ca908e45a8cb2add648c1b341994296c954d84055ee91ec6155
SSDEEP
1536:mPO6KEVbsVP0gdb0e90HMZCWOFPgEZfnq7PsUb+L:cMEVbsVc80e9SMZC5Rq7PsUb+L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebf6fb23b195e7e089829f9e593cf722_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ