Outt
Sett
Behavioral task
behavioral1
Sample
a7e1fd43f37456e7247b14c4691d8e15_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a7e1fd43f37456e7247b14c4691d8e15_JaffaCakes118
Size
65KB
MD5
a7e1fd43f37456e7247b14c4691d8e15
SHA1
bc82ac52ba8827bf52064b69a8ae2ea4e4f7d570
SHA256
c5eeb6e1290dd6fed1b46f2a82eb153228ecf099bb682fab35c5cc67fdf49929
SHA512
ec54b8a6344cf542552bd8c4a309c23332d50a3467b226769f1a4c395b8570951212a3edcdcc20c265d4389343f3628d4f7941dc9d4e34ec729f533856721f2e
SSDEEP
1536:yl3E0T6I0mQawhkXF3BcgqyrsBTlMa3FPOq20:E39F07aYkXtBcmrVaVn20
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7e1fd43f37456e7247b14c4691d8e15_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ