Outt
Sett
Behavioral task
behavioral1
Sample
a8523f8262e62a62891571d0e362caab_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8523f8262e62a62891571d0e362caab_JaffaCakes118
Size
69KB
MD5
a8523f8262e62a62891571d0e362caab
SHA1
7c1a1b43e4d4bbf8df849bd102cb767b06ccd0e0
SHA256
6437d0c2d852dd8e7302ae0cdf34d5372f8eee02f79c543e08fbbd909804b4ad
SHA512
37328ccfb1d3e195ecd0be048c911440f0101585fcb771467eb3a31c6affcf09f64c610174d246d5ea2211edb1131e7b1b4b79d9954a0b96619aaa4f97cd2b00
SSDEEP
1536:2hq93HvupLvfHyWr4nF1pGwiEOwTocD1fJUozUf44YHwGeVT6:ztvuprz4nF1BeuL6f43Hw5T6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8523f8262e62a62891571d0e362caab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ