Outt
Sett
Behavioral task
behavioral1
Sample
a88b29bb19a12e90d1eb989cb68183fa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a88b29bb19a12e90d1eb989cb68183fa_JaffaCakes118
Size
63KB
MD5
a88b29bb19a12e90d1eb989cb68183fa
SHA1
b4ef11f67a38fdac7debf3a8b9350289db52f0f7
SHA256
754c903e48950f3a8e027d8cc034ee295c1bb47ecad34e7e3ffe3d639c0ab0e3
SHA512
9720a351a07af5f476d0d8ead2326ee0e2c827715fa7fb65826ced0add3b41716ba1e5ff31fa5c924554196399444ba7cd20396c3a35ca915e47185794ad5252
SSDEEP
1536:EG5b20Rq9ggNJ/LrEjTT+bDLTmq3J14zj+xN:EGE0hgTHKsHz3JiWxN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a88b29bb19a12e90d1eb989cb68183fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ