Outt
Sett
Behavioral task
behavioral1
Sample
953b6434a86999d623720328e4675179_JaffaCakes118.dll
Resource
win7-20240708-en
Target
953b6434a86999d623720328e4675179_JaffaCakes118
Size
71KB
MD5
953b6434a86999d623720328e4675179
SHA1
def7aea255c9c41f18fbe6cdd590cdd85738693b
SHA256
1d434ffa74bae762a41c336c9497eae5cc78c20ae5c795b06586e2500d2fd47e
SHA512
6e651fde5f6e70dea0dff16d154b7ca86429b89413e7f92f645b2099fe32bacbdb59b3ec66a8e353a7297fac41519b5e28710c004e677781fcba1a2a9e3b7785
SSDEEP
1536:APqmOCbghiF7QQCNhXHXJllnqWc5ehNjjJJ0w8E5Nsm5:cqmAEF7IhXDlueHjjJJ0ism5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
953b6434a86999d623720328e4675179_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ