a34f01e6341149e7e5ebe2d7cd9ca3ad_JaffaCakes118
- SHA256 53563fbd91f64957c81e813d206a6afc7224cc8d391e5b982231afe0aa49b79c
Overview
overview
7Static
static
7Ancer-v3.5...er.exe
windows7-x64
7Ancer-v3.5...er.exe
windows10-2004-x64
7Ancer-v3.5...al.dll
windows7-x64
7Ancer-v3.5...al.dll
windows10-2004-x64
7Ancer-v3.5...lp.chm
windows7-x64
1Ancer-v3.5...lp.chm
windows10-2004-x64
1Ancer-v3.5...ic.dll
windows7-x64
1Ancer-v3.5...ic.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Ancer-v3.5/Ancer/Ancer.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Ancer-v3.5/Ancer/Ancer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Ancer-v3.5/Ancer/DiskSerial.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Ancer-v3.5/Ancer/DiskSerial.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Ancer-v3.5/Ancer/Help.chm
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Ancer-v3.5/Ancer/Help.chm
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
Ancer-v3.5/Ancer/SkinMagic.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Ancer-v3.5/Ancer/SkinMagic.dll
Resource
win10v2004-20240611-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/Ancer-v3.5/Ancer/DiskSerial.dll | acprotect |
| resource | yara_rule |
|---|---|
| static1/unpack001/Ancer-v3.5/Ancer/DiskSerial.dll | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Ancer-v3.5/Ancer/Ancer.exe |
| unpack001/Ancer-v3.5/Ancer/DiskSerial.dll |
| unpack002/out.upx |
| unpack001/Ancer-v3.5/Ancer/SkinMagic.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=19, version=8078,
count=1, id=18, version=8444,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=20, id=14, version=7299,
count=75, id=10, version=8047,
count=9, id=19, version=8034,
count=93, id=1, productName=Unmarked objects,
count=1, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=20, id=14, version=7299,
count=75, id=10, version=8047,
count=9, id=19, version=8034,
count=93, id=1, productName=Unmarked objects,
count=1, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=31, id=14, version=7299,
count=13, id=11, version=8047,
count=118, id=10, version=8047,
count=4, id=10, version=8966,
count=11, id=25, version=9210,
count=287, id=1, productName=Unmarked objects,
count=96, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,