Outt
Sett
Behavioral task
behavioral1
Sample
a0fe0c393476154d75200315fc4e33c5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a0fe0c393476154d75200315fc4e33c5_JaffaCakes118
Size
78KB
MD5
a0fe0c393476154d75200315fc4e33c5
SHA1
4a870103f4fd53c2d6506a785cb648e76c792c70
SHA256
95d4f0753fa030376a1c7bd9276ca6d46b3be0720fad3858cb0584afb84456d1
SHA512
8b8b835ab48c78fd8bc0b4df9ef9c536a75395bd67954fe0a726540a045a0e981b301a7b92566e7dbb345d1d093c8c83670b0c74f2e54a6fb9b9616385000dcd
SSDEEP
1536:+VZmwePmlevRpLPhITUcwIkCOJ2odyXBCshcn3ydZ8K5sOmknP:KkweelNTEhCOJn6oKZUknP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a0fe0c393476154d75200315fc4e33c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ