Outt
Sett
Behavioral task
behavioral1
Sample
a015181c0c70ada4fd27e3013670ef70_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a015181c0c70ada4fd27e3013670ef70_JaffaCakes118
Size
74KB
MD5
a015181c0c70ada4fd27e3013670ef70
SHA1
d08772b00973872440c0cf85f32553c246083012
SHA256
a4b88680f3a8fe67ea890786fe23222008c4e7b797b813b9f7e9e846da5bfb38
SHA512
9536941f48571a34e2d2da9fc6a724597457c1c3b25d529a0acc13691f6a8aa98b1d30dab7b18f4cb149d9b79f392b16b5eaeac5793244edc53c8b47c723cc2e
SSDEEP
1536:n7ZLNPp9pZBMMWtOXSpDRw0YFwCE7NOHaD+5hf8N4QYTzV6RId:7ZppRWLAFlgOHa6fx56s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a015181c0c70ada4fd27e3013670ef70_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ