Outt
Sett
Behavioral task
behavioral1
Sample
a5bbf5bcddb64e253f5a0e714c02c4c9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a5bbf5bcddb64e253f5a0e714c02c4c9_JaffaCakes118
Size
49KB
MD5
a5bbf5bcddb64e253f5a0e714c02c4c9
SHA1
cfa6c6ad869ef60b949ad9e23c4a12774432b899
SHA256
9a5fcdf27dd34a49cf57f8b77a18995f05f4881caec61066b24cabf1c439e701
SHA512
ff7770551cfc2a08f6800a2ceb11ec7daf79c6a34702694b7e81075750861b38202bcf0b73aa22fc151a15a90e9f80cbd1457dcbe9c8f04232b42e6041c3d5fa
SSDEEP
768:GbvLDaaMact8Tv7Av6oGQaCPEdhie9dxte1S0TnyVMv1hh1cmDcNtjgC9wcrIJH:evLoXaHve1BzyVMvHzsz8C9FrK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5bbf5bcddb64e253f5a0e714c02c4c9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ