Outt
Sett
Behavioral task
behavioral1
Sample
a6e2e3093b9eb13f9510528179b9383c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a6e2e3093b9eb13f9510528179b9383c_JaffaCakes118
Size
48KB
MD5
a6e2e3093b9eb13f9510528179b9383c
SHA1
588ccfff932566e2e97a930803962790475a28a5
SHA256
bd0963ff72baada6fc13c3409dec6fe2b8e53337ccaf8aab9027fde620969d8b
SHA512
57165a45f8f4e9668090d8b9447530418fdf259a701ef944d8878d9a085d0ed18d43b1977c85b68c215662f734c9089831d335a290ddfe864c773ec3d76fa6b9
SSDEEP
1536:YJEu0nVKIOKTIs36cFu39y/dpjA6PC/Zkqxz4bGm:YmJnVK3KTIFco39cPCBkqx4d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6e2e3093b9eb13f9510528179b9383c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ