Outt
Sett
Behavioral task
behavioral1
Sample
a5ae3c96090cec12832c59041f0ed4ce_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5ae3c96090cec12832c59041f0ed4ce_JaffaCakes118
Size
66KB
MD5
a5ae3c96090cec12832c59041f0ed4ce
SHA1
37c7852f8461685bf6a6265bc0c1392b739c2580
SHA256
13ed37edf105ca1152e4126906fd64eb7a4e7b744724931f39b901771a030b01
SHA512
8250cf3842c8c6f438fb3a620f8110c737207de48811d43b364658c98c73bf78b9bfb037fc6ea13683a63df0d8c1aa575b8625073b404d264de4087453e4bcc3
SSDEEP
1536:mPO6KEVbsVP0gV8KY7R6YIL+Usfu81fzR6CFyHQwQq8CCo8iQo:cMEVbsVcc87EYfbfDZR3ywwWC7Qo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5ae3c96090cec12832c59041f0ed4ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ