Outt
Sett
Behavioral task
behavioral1
Sample
a7033ab3b87d71fd87cd36d62c77d85f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a7033ab3b87d71fd87cd36d62c77d85f_JaffaCakes118
Size
54KB
MD5
a7033ab3b87d71fd87cd36d62c77d85f
SHA1
92f058622049061151fe1a06f88c3afa50017666
SHA256
730748606ca758ae9981cc6f234e5f9e5508447e21d8cdb3438d05af3e73de2f
SHA512
db1728de937391eb72cf41d12b98af9fcf1b7f25c323acb932a93933f6445aef25536ecf097650e1573835302df2932091991b3ba949ced97f443d0eaca584d6
SSDEEP
1536:evDP4mac0Tn72HTuTDkDEffb0G69SF0uk:MbgnaHTunv059SF03
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7033ab3b87d71fd87cd36d62c77d85f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ