Outt
Sett
Behavioral task
behavioral1
Sample
a6ea5a8ebe83c6d20de8a0b23f4b2589_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a6ea5a8ebe83c6d20de8a0b23f4b2589_JaffaCakes118
Size
64KB
MD5
a6ea5a8ebe83c6d20de8a0b23f4b2589
SHA1
8eb069277feb46bcdec4d5e86d6ee111e1d6bd86
SHA256
89ff3f03a591bd503317613332aa8d0c0c3dd92ba76485acb7027925433f59aa
SHA512
6028a11986c82a1ebe118256971a81804b55abe102b0ec9d54c7fefa92b0f9134026ea6809339ee8ded012d8b4f307c8cf0a2f5500e1e7a32c3119190a965882
SSDEEP
1536:1zExMwCGQ2jdbgDZjX8sth9v72HHyXy+GcTD5rtxT6Aj:1I+wCGvhgDZD9T2HMQk9D7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6ea5a8ebe83c6d20de8a0b23f4b2589_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ