Outt
Sett
Behavioral task
behavioral1
Sample
a856d6d79a405d41081fae52970c832e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a856d6d79a405d41081fae52970c832e_JaffaCakes118
Size
55KB
MD5
a856d6d79a405d41081fae52970c832e
SHA1
d83ffd5d317c3ad8620e3896000ee3a2a37d81fb
SHA256
f28e3f7aac8e0aba72da4f49e3e0778a79947e874ab94dd59535555a3e742c32
SHA512
3effee4ed53c1b38cf7fea95d28ca8df92c8440a5193c45b4b972b173d02ab17a9cd1c37def310656e9cf44c511df01803f46deac3e540f69bf64026f3ace1fd
SSDEEP
768:sI1c+XaXF7pMWiA3Uw/oW/WrhLSkgNaD94L/s3gXp1Rvjxjpu/4Ji9cvlfISTpnB:soa1lMWieIhtDGQa1Vjxgw+8Np6dDC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a856d6d79a405d41081fae52970c832e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ