Outt
Sett
Behavioral task
behavioral1
Sample
a409501ade1530427ab022f151d868b8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a409501ade1530427ab022f151d868b8_JaffaCakes118
Size
69KB
MD5
a409501ade1530427ab022f151d868b8
SHA1
36c299d1fc139dd8bf6fad81f12d20b163580d53
SHA256
2d70862288ecabe2f7822bd1a24e1a5af04c3002ea33de99ed8e9b684109dd22
SHA512
8aa7b700f31b35d99a302c3159a17ca07136fa9e6dcaa138e02d36ec0ab71d0519346e774ef70a849ee4210f29964284f3b0f8190383a0236e9b9b324925d191
SSDEEP
1536:Bm1NGJVGeoINVac9vtEmiIavBmKXJrn4UD/TvPj7H6Ag:kX0VNoINVaSvtEOaZrFrraAg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a409501ade1530427ab022f151d868b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ