Outt
Sett
Behavioral task
behavioral1
Sample
159b6ed14767e33a655ff51fb8c3724e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
159b6ed14767e33a655ff51fb8c3724e_JaffaCakes118
Size
73KB
MD5
159b6ed14767e33a655ff51fb8c3724e
SHA1
d75e21cdf0170e9dd72a41c6aef58f7b717ed868
SHA256
96910c137e572cfc55e5ad53ee49163938d229e8805d7efaec1142be826d3781
SHA512
72f330acb6c37cc0a5ad9168d0de29a99442ecffa7f1618de164dddd271d9c45138db20734919b8c088b0acfcf8a7ca331dad782660dd6dd27cb9a95cd8a0f04
SSDEEP
1536:mPO6KEVbsVP0gDMltqilbOpwl1DADxf5DW/TpVbHEVMHVAeUael7ZGbw:cMEVbsVcNvlbkwl1iCrpVHpHVjbeldGs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
159b6ed14767e33a655ff51fb8c3724e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ