Outt
Sett
Behavioral task
behavioral1
Sample
a62107a31217f47e5ccc98940e926504_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a62107a31217f47e5ccc98940e926504_JaffaCakes118
Size
54KB
MD5
a62107a31217f47e5ccc98940e926504
SHA1
dd529821a279796fd4eb32b0180e98f6b6554d28
SHA256
36302e7b6ab074f941bc48cfe67961231adad6d3517d683fbdb552092435f477
SHA512
a1226439b6e383f88d100341535fc339f1552d9bc6ffb934b9cf94a7ffb58f586633340524dbcce8bc8ed776fda5eac452f4c15581a5f281ff441949acd34775
SSDEEP
1536:MhBRVgrExucM5suOaCMogOOKUZOjV4bPCZ8lk07++6QwY/x7B:cRRsAuLwsK1JqxlZzLb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a62107a31217f47e5ccc98940e926504_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ