Outt
Sett
Behavioral task
behavioral1
Sample
a550d1655102eda60dac06777669fedf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a550d1655102eda60dac06777669fedf_JaffaCakes118
Size
62KB
MD5
a550d1655102eda60dac06777669fedf
SHA1
92072af8f89580dbda6db2e20ced1443503b564c
SHA256
42617d6dfdee2dabbac2330fd004fbab7666d13dd928f2637cba36df67d32f3c
SHA512
60013850f06787901df2239f6e5929ab9860333f8d52304ecf9d044597c9a5e14f78cb9f10208513c6b5096cda0ef7dac1d40c775e5229fb0179a0b166aded34
SSDEEP
1536:ev4vAhIBdFmjNXhYaXQBq4nAioTuVKAEjZ10aBkNE8OrUQfh:Ah4ANalqdvzZ10ausrjh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a550d1655102eda60dac06777669fedf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ