Outt
Sett
Behavioral task
behavioral1
Sample
fceb3325e358596ec7fa40fc9bdbc23d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fceb3325e358596ec7fa40fc9bdbc23d_JaffaCakes118
Size
52KB
MD5
fceb3325e358596ec7fa40fc9bdbc23d
SHA1
6e1aa4ed140daf818b574da642e7acbf4cefd7eb
SHA256
7bf320a305447bf265c0631147b990f641b6644c13b881e4ef82c9f53ea7a298
SHA512
ebb65d813ae36aec3e0d4687cc643d0a562669825bb0e0def5e8e8e317ce7d41b34b0bbc8a65f1d9ece0014586af5786a3c32af1ecdb3399b0f3bb7c8ccc0633
SSDEEP
768:op1VqVQwL6diO9DnPHj6Hd64bWeJwimhVAOQoDs4xhrafArHe/gKxhkIuCP204ZG:ob8Vwn/6tbgimErorrrHU+/C+0478
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fceb3325e358596ec7fa40fc9bdbc23d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ