Outt
Sett
Behavioral task
behavioral1
Sample
a71286b4ec1e5bac5ee438252cbd81c0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a71286b4ec1e5bac5ee438252cbd81c0_JaffaCakes118
Size
64KB
MD5
a71286b4ec1e5bac5ee438252cbd81c0
SHA1
0daae4520982bf4733d9ef53fdd9cf13080895c6
SHA256
c8206cc382e46a93aed798a27e934d6ddc48d36f9991584b9067874e13ccb8fd
SHA512
0d5e26beb98f47c5c66568cce906dff68205a631d2629399a83553c98ad066b40bc71bda966700bf4f77b0ab51fd70ef6e7a42ed930a297f99155675b13cb20b
SSDEEP
1536:ev94Ts60ifu2T+Ml0m+LGO+zmZpgNKuF16BpGxU:QKu2T+MSvqO+zmZzQba
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a71286b4ec1e5bac5ee438252cbd81c0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ