Outt
Sett
Behavioral task
behavioral1
Sample
a55226f00dba16ca7e7311f63d5e46fc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a55226f00dba16ca7e7311f63d5e46fc_JaffaCakes118
Size
56KB
MD5
a55226f00dba16ca7e7311f63d5e46fc
SHA1
1c8e1fdd3d84747c915e6fd756c056ddfcb9331a
SHA256
26c0bc904957f93d7b4659db10920cd4b3bc14a3af8bbcccc0ab0665a1da9365
SHA512
5e3326333c11df2a046c4dd411a883e39531e7e098d6fc99ba61c216b193d9da187eaae6aaf6d82140bac29e75b2e32dc75ab7ddf199afe161a938d1670b04d8
SSDEEP
1536:MhBRVgrExucMtltKShUaFtUFyxZotk1qKcombIp:cRRsLltjOaDUAotk1qDDIp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a55226f00dba16ca7e7311f63d5e46fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ