Outt
Sett
Behavioral task
behavioral1
Sample
a62d7e76803f787b8ea345e2c2a01915_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a62d7e76803f787b8ea345e2c2a01915_JaffaCakes118
Size
53KB
MD5
a62d7e76803f787b8ea345e2c2a01915
SHA1
69e6e94c21dc078045160867bde5d2261e694061
SHA256
5cbf417a86345e1874f76d348209f48d6a318118aa6506818bd816af7c1111c0
SHA512
ba2e44c22159ba7c1c92fbfad3be3c10159aeb493c640fc2a544d8f8059745a9b2b0b08caac146af64d99f8aa9a242dd7eaf500c62f0ee6eef7edeb8d55e4db8
SSDEEP
768:nbY4l4HUsA+ThWMLKsLoOr8yBvjy/6ccmv/6xFD1CMaplbh6s6huv/dJZVh7vfx:EG4HtANs18l/RcM4Byr6ha7Z71
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a62d7e76803f787b8ea345e2c2a01915_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ