Outt
Sett
Behavioral task
behavioral1
Sample
a7cab3146d17c9474a33352e42bfb1f5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a7cab3146d17c9474a33352e42bfb1f5_JaffaCakes118
Size
73KB
MD5
a7cab3146d17c9474a33352e42bfb1f5
SHA1
e2f352b63906723e629ebd8e798dfab151f09bb2
SHA256
cc68fe15474630312b0752c689d72e162eb1fc979f72aea3b283a71178b452d1
SHA512
f1110417051e2a8e629f38a560f925ce3e635bcde2f9ed2d158377548f083737a2830f0987edbd87f6f43fb9571d152f17bcc60ac3b35a3c39b06155f0f1f39b
SSDEEP
1536:n7ZLNPp9pZBMUkcBekPUIurdEcINZKJNytcPC8LtQk97qFwc2LVS0qT:7ZppSStP4rdWZGPl97hSh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7cab3146d17c9474a33352e42bfb1f5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ