Outt
Sett
Behavioral task
behavioral1
Sample
a7acd34e4ae930e26ccb5ddf15e50911_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7acd34e4ae930e26ccb5ddf15e50911_JaffaCakes118
Size
58KB
MD5
a7acd34e4ae930e26ccb5ddf15e50911
SHA1
d6c55e9d85dcedca7f4ca5eda7bc6e244c82e2bc
SHA256
e13e2cf3894955d4d387af76905f5457c34f54109274feaaa5b87826b2c936b7
SHA512
aae1ea1b43ee1fb5bd930c280e799d39157369507e95188df48a9f398b944a33c6a3217c9e247d8ea8e1da2bb9c8a9efd0da760437287b0331fb96828cdf6fa9
SSDEEP
1536:jZIcCxRZKJ988k0zWsGJOZBSSpPy4UlAXDrUyz3yKzmIAN:x+rKj8F0zfJZBFPy4XXU+FvA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7acd34e4ae930e26ccb5ddf15e50911_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ