Outt
Sett
Behavioral task
behavioral1
Sample
a01d71d0fd4aaca706494fdfe28bf68f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a01d71d0fd4aaca706494fdfe28bf68f_JaffaCakes118
Size
67KB
MD5
a01d71d0fd4aaca706494fdfe28bf68f
SHA1
35a073175f0bd21e1fde84b905286051473a0639
SHA256
8a4620a564217f27bc79a1c29e5c7fcd5fa721734ac7e987b2a20c5bb59e5a00
SHA512
edacdcde72124ba9385ec253676bcbf3a446f73e31eaac808075f7cf6ae4109ac3803a1bef63d8e3454b4bf9389b98ed00259830dbc75214620c4d4076d75c36
SSDEEP
1536:Bm1NGJVG9pFgriYMF1KY2dtxr+nCdI3wWB8f4hCRQwSE:kX0VMci1F0Y23wnSVWaf4hGQwt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a01d71d0fd4aaca706494fdfe28bf68f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ