Outt
Sett
Behavioral task
behavioral1
Sample
a826d4ae9591a87bf152364774c50ac6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a826d4ae9591a87bf152364774c50ac6_JaffaCakes118
Size
75KB
MD5
a826d4ae9591a87bf152364774c50ac6
SHA1
08d02c9c5dff9ca985aa4c9a41ed2bc40c8095e3
SHA256
ab3156a644615ac29e593147b8c0c8bd0c6d3974321ef6ae6ad488f41273a761
SHA512
2f1e1ea6d7f5686daab0477dda7df66d2954a9382a9327d565a53e837304456ca88b2896c9089251c1b9c26ccd4de87dbebc0013d7fff077e120f92a226a5a18
SSDEEP
1536:agF0eiyUcbfLE6afs6zVA9y2wmrXg5Ejx9y5:t2yFjLEsgVKy21rcqxU5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a826d4ae9591a87bf152364774c50ac6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ