Outt
Sett
Behavioral task
behavioral1
Sample
a834683fc3dcece5fa2ba86f17320c97_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a834683fc3dcece5fa2ba86f17320c97_JaffaCakes118
Size
64KB
MD5
a834683fc3dcece5fa2ba86f17320c97
SHA1
968729aea40848bb858dffdea6e372079db45762
SHA256
a5d704e42943e1a49d5fd3f91b5ec234903bbbaa8f9cf5cf11149e266e57686d
SHA512
f6ccf448a496d6ab554e8dabe5ae9caeb232e0d2fdbf27768f82688039d95befbef8aa2c41e5a494ed6892f13245d872bbba4a0d5df9fa84929805afe251f324
SSDEEP
1536:1zExMwCGQ2jT6XQE5x343RnfPGbjLv0Oot62/apN906:1I+wCGvqXQeF4RHQjD5Ea/b
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a834683fc3dcece5fa2ba86f17320c97_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ