Outt
Sett
Behavioral task
behavioral1
Sample
a5cbf29bc035def89338806e79b4bf87_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5cbf29bc035def89338806e79b4bf87_JaffaCakes118
Size
63KB
MD5
a5cbf29bc035def89338806e79b4bf87
SHA1
f969e9b6bb487de4d8784bb864c405beeea9dcd5
SHA256
415b52a20ae7acc6174e4a88cf6aa52515de54f6a17653692d466b9f86ebf892
SHA512
f55a8a606b3bf221d15612dead3f6fc5beb10320fec204c57e4e003a4739c51ce4773c024bbf37b1e65b8ae8f981ab4f1d269875c7cc58fd303ba9046862d375
SSDEEP
1536:23umoMtxtCDxDEk7pdXuZKEV8caLy0qkiZb4hpf:CoMtxtIxD3nuZR8cgyfkxhpf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5cbf29bc035def89338806e79b4bf87_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ