Outt
Sett
Behavioral task
behavioral1
Sample
a886f13af3568dad8863eedf262fb731_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a886f13af3568dad8863eedf262fb731_JaffaCakes118
Size
55KB
MD5
a886f13af3568dad8863eedf262fb731
SHA1
2440a24b2fa03a8cb7ad1df7187b116d2e1b7bb4
SHA256
3c526f0908a478048bfd5190a0fd3b8efd3cf2c2e795be1b0f5bd7f1e397faa3
SHA512
81db82bd59e5d4c0c4ea9787042af28b3972beb021a47937c11c049b7e2df5d4debe2c21a4833a39cd33e9e03d6afea84f443cfc5f6964e52a76bcf40c9e273b
SSDEEP
768:hM1opOjOOfwvs/FqD8DLnyHqVXGtCHdv0WU3x9uRv12gm6Yfbe4hOUBujG8aaa6g:anRp/dLyHeGtFxJgmFq4hOUQjygunIS3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a886f13af3568dad8863eedf262fb731_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ