Outt
Sett
Behavioral task
behavioral1
Sample
15f930bd5e4b9b37282c35c0218852c8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
15f930bd5e4b9b37282c35c0218852c8_JaffaCakes118
Size
47KB
MD5
15f930bd5e4b9b37282c35c0218852c8
SHA1
2854fda258e25ad355459291a24427801ab2d374
SHA256
d7492f1a258d13ad75da2e10dc558f1d4ae6264e3c9f8888ba0dcf9469a1177a
SHA512
a278de26a15d0dff112a68b97621c7c3378a6b5abd7a6f218871006c9ea211bfd6b0a75c3b3cd215f8dcb4d53966ef4434242a64ee0394f046119182b8f60eff
SSDEEP
768:MvpgVGR3FgShFL+D+Jx6hQgeNEfT4cnJH4ztjKl0x8dn7YO2ycvEAPK1JPZPjQuk:MhBRVgrExucMTBJ1uOZ8O2zLPmtpQueZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15f930bd5e4b9b37282c35c0218852c8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ