Outt
Sett
Behavioral task
behavioral1
Sample
a63ac3b08052d415f70800edcab7115c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a63ac3b08052d415f70800edcab7115c_JaffaCakes118
Size
56KB
MD5
a63ac3b08052d415f70800edcab7115c
SHA1
d36bedbcf44091eeb02ba3abb9c7c91f0efc1f50
SHA256
5be00e21c09c009604e032cb560f168f781f91684a90601b2e3caee47095fd57
SHA512
4bc12554fa906c73d7a59eafe88cb6090b5ca6300a42139d963d5f3666f58af4b2486dc7d88c9d8f1afd3ffd318374e7af91acfa5eb171750ba28684b543626d
SSDEEP
768:1zExMf4sJGHw2jn38Z9Hx9obpj0qs4dZ/238B+SuntdU5mHiNqguF1BM:1zExMwCGQ2j6pToB0MEIpuDHCuTBM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a63ac3b08052d415f70800edcab7115c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ