Outt
Sett
Behavioral task
behavioral1
Sample
a067b387d10b1d75141c0a51213199b1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a067b387d10b1d75141c0a51213199b1_JaffaCakes118
Size
61KB
MD5
a067b387d10b1d75141c0a51213199b1
SHA1
0cde5aaebc7265235bd5be5c5d9783150577646d
SHA256
ffd1cc954551c7b48785d28f2a91f1842b09417c4303c62af5c035b0d6f0a4ba
SHA512
9a002f353e887054e3e18369a69f88db47c7760a678bc675c001b2794fd61ec6642f9b0a77d7e48903db2a1c1e88b7cba9d36bc14308b87a93b917a9ad1af0e0
SSDEEP
1536:yl3E0TFfMe89ir7ZLFsWv01nyp+M2hJFgLwv:E39xUe89ifZZsWv01nyIFjv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a067b387d10b1d75141c0a51213199b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ