Outt
Sett
Behavioral task
behavioral1
Sample
f56ff7e75dcc6325db1ece3f23266c50_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f56ff7e75dcc6325db1ece3f23266c50_JaffaCakes118
Size
61KB
MD5
f56ff7e75dcc6325db1ece3f23266c50
SHA1
fcb48a482ab6b5e42435b9521c06322c48ec1b22
SHA256
758e1ac3ce54e6954ff1aadd691039f05c9e6c05c3e413cd6d8dda2c59ed129d
SHA512
a4e4bf58b4b4e96086b2be6a8809250d6df31c903cdecfb47724c18c5547505053d3d4fae35fd66e0abb489931871074e6000b22fa4672348441f118a3a74e7a
SSDEEP
768:szM2xVVSrYa06Sy6Wi2u3nITiU6ZRzNLaTw0iN4A1EC7VE9BIEO03g3sfxxx6stf:V2bda/SyFTgiqLrs9gWxntnSks6Tewr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f56ff7e75dcc6325db1ece3f23266c50_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ