Outt
Sett
Behavioral task
behavioral1
Sample
56e58c4eedf4e7f62b4c78f2ad898cd8_JaffaCakes118.dll
Resource
win7-20240729-en
Target
56e58c4eedf4e7f62b4c78f2ad898cd8_JaffaCakes118
Size
75KB
MD5
56e58c4eedf4e7f62b4c78f2ad898cd8
SHA1
7cdd0fd4d2c516e9804c33820f8e21ac65454c3e
SHA256
f6b5428bb7cf6f80fa407c9ae0ba1da48d3a136b2a43dd9938a020fb29aee16a
SHA512
c576a54e3cd35fe8f06e6368d2256025112cd6bf7e9bda4dbbd41d405c496dae791ec659464708d7efe8b41e1a1d6418a3dd61592d4a827fcc7fe700ebb71c2c
SSDEEP
1536:jixdiAhXQ0Ab7OvOTCMIJkz85JGDLlBMDUVTRqse3SIvh7iyR7aM1c:e4o2b7ZTCM4kCg/MYebh7iyRB1c
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
56e58c4eedf4e7f62b4c78f2ad898cd8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ