Outt
Sett
Behavioral task
behavioral1
Sample
a777e743210e5f81841490dc04e2dc56_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a777e743210e5f81841490dc04e2dc56_JaffaCakes118
Size
68KB
MD5
a777e743210e5f81841490dc04e2dc56
SHA1
6b2788f5dd63205589e060ef2d9b88589df96c6f
SHA256
aee44d18d46e865bacaa1f17b5905f19f199bbf4d54ad66d1f75059df7f3ed59
SHA512
a22f02d702f7e13a8a04a9b71fd012370bef6a9a4e0fe69cc1b1df69ba9fa1724ed035245c133c79f7aad4583235c056e283823f6a57666eee6f05f9cd07ae4c
SSDEEP
1536:evxoYoCWiSfeE7E6raRu2/jVTcIv+29PAM:+opfv7EVkejNvNx/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a777e743210e5f81841490dc04e2dc56_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ