Outt
Sett
Behavioral task
behavioral1
Sample
a8865b6c629eb21ba93f5168d2fa49ac_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8865b6c629eb21ba93f5168d2fa49ac_JaffaCakes118
Size
62KB
MD5
a8865b6c629eb21ba93f5168d2fa49ac
SHA1
38d0c7d073f9a23273b7bd892d47190de89f47b2
SHA256
7d6a3e5de058d73234412848130c6f14403c21a763e9a82d57f2a8ef8a1df1fe
SHA512
edfbd5f2a2967f346c0bf8d1fd4520b9c3de97524379dfbb952c0926affc7949d0ca6e7558e959bcf2c961eb8769dc3fdee6018f91ccb0448d54dbae69b416e7
SSDEEP
1536:1zExMwCGQ2jkJGV+eGtrUxH3sgtOIazV/40RtveD6kV:1I+wCGvYW+eMQx8nFV/rtYjV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8865b6c629eb21ba93f5168d2fa49ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ