Outt
Sett
Behavioral task
behavioral1
Sample
a59d63777a6ca9a156547ab276b997c8_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a59d63777a6ca9a156547ab276b997c8_JaffaCakes118
Size
65KB
MD5
a59d63777a6ca9a156547ab276b997c8
SHA1
f54288f07d7b82587678854bbc6d2b4630413c71
SHA256
ae4a0344e36d832a0a2648b1aa3e3d808e8f4b954db40af9e593029a3c3d75ff
SHA512
b2e97649091909cfbdce9731f2a36c38f964bfe1a501256df548706e2095226a396f29e03c92bf361fd5c2e09ccbf8771a8b9912e4029b8a45c0a75642035288
SSDEEP
1536:RVWB/aS15632ZVc6OA1GtOPMv2uluQZCf4nabq:T5SL6IVtOI62iuWnj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a59d63777a6ca9a156547ab276b997c8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ