Outt
Sett
Behavioral task
behavioral1
Sample
a53cfe36e56a04e440483ce5c879db64_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a53cfe36e56a04e440483ce5c879db64_JaffaCakes118
Size
48KB
MD5
a53cfe36e56a04e440483ce5c879db64
SHA1
74d64beb07d5a8e2699818a2f4538f7768dd327f
SHA256
8f2d5bd1fd57f2423eed9d1cd091e02108c78f182325643e6e7ca3f20d25ff96
SHA512
0fd2e667dfc88c880f352bd306d9f5529ba9a97cbffb91155875d039dde53fb80d219dadd2172530e291107ebfc01d3a474f93c274888182b3217f657315d3ad
SSDEEP
768:nbY4lWCCtJ8wVaoYmU8T+KMGkY+cQpPlAEVu5MRBMRAO9EIydVMQY:EGWCCP9aoUPOKp+EQuRuR7hKLY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a53cfe36e56a04e440483ce5c879db64_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ