Outt
Sett
Behavioral task
behavioral1
Sample
10317ecd04e1900a27febe7e51ae2b1b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
10317ecd04e1900a27febe7e51ae2b1b_JaffaCakes118
Size
82KB
MD5
10317ecd04e1900a27febe7e51ae2b1b
SHA1
9b45ca0652659fe0794d345ba1be316c78ed036a
SHA256
b0e1ced5d2e9521a0bd9493a3d6acbd0408f2baa677adee091baf8e3215f5347
SHA512
6a906f3e2efdb6674b603bde788b9fc8885790c571993904b72b1be618e5918703fc435daa0ac5a4826efc5ef19364a0e2f0f96ca463683ddaea3706c74a66a2
SSDEEP
1536:p+CZ8LwKKjTAPYYYYXhjyGjkclooheJHTaipTy8s9EGjoxOgJVH9WiUCUegh:gXEsudGnlV+zBTYoEgo8Pa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
10317ecd04e1900a27febe7e51ae2b1b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ