Outt
Sett
Behavioral task
behavioral1
Sample
a58bd251c37f220d41799c3dcd073b21_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a58bd251c37f220d41799c3dcd073b21_JaffaCakes118
Size
70KB
MD5
a58bd251c37f220d41799c3dcd073b21
SHA1
fa439bd1cb41d468c7af257b07415b746689af19
SHA256
f1b8ea0bdfd3d99880579ea8fd15da54600a1af85da87e10931c45c4958dfcf3
SHA512
a71df651d16fac23687ab1f0e9e0ede451c5335084cc4e5bc943e9cabf2bd88ad03626c2015826ef13ed81db22000a889914798c2381ae3990f3a6f79e3d2d03
SSDEEP
1536:HKvv9jeCw6l9n+Eu24QRzY7VOWKsdkV2eaFu1fuejMxoxIaM8jjqg0f:TSHu24QRzIVxK21UpuUMuIa9qp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a58bd251c37f220d41799c3dcd073b21_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ