Outt
Sett
Behavioral task
behavioral1
Sample
fa7f8d3bc7b0a02332b79b7bb730cf29_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fa7f8d3bc7b0a02332b79b7bb730cf29_JaffaCakes118
Size
58KB
MD5
fa7f8d3bc7b0a02332b79b7bb730cf29
SHA1
e5a326b50b8529bf4b45bbac9189ab5844ee040d
SHA256
0f99e7704288fc87f8e9c6ed083ad448001017be05f73987e2f251fc6f1b0a92
SHA512
53cf7435e4fb93ac29a438c9eec50d1d6e7f6fe163119cff24bd5b49660533d7ba87026ee543db3a3b455282f4a8be1783b96f5194fc3545cacedf21e5bacff4
SSDEEP
768:nbY4lXxeq6wIQXX4DUprKE/GsQENuXG5uHTO4pJG2kvcmj1XTQgC29WvikcRC:EGXxpxo4b/1tNuW5ua4Dyv1j1DQgCa/C
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa7f8d3bc7b0a02332b79b7bb730cf29_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ