Outt
Sett
Behavioral task
behavioral1
Sample
a9896407896fa1eba517dc67622bf6b2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a9896407896fa1eba517dc67622bf6b2_JaffaCakes118
Size
46KB
MD5
a9896407896fa1eba517dc67622bf6b2
SHA1
e533019146d8d96c480bc315a270cd70f7a20849
SHA256
155315ebe1f8b1b0419870cd32dbead14a9f2eb0f3f56fd4c0594d5c0b4b0b00
SHA512
9ea1301dd34fa0294c7d0d10f6df9aed7ff688914c75ffd157df4f07ace2191c75c9c98a9ba8ea3458318f7a5a9154833676d87087b0a9e5bea2e4aff143c58b
SSDEEP
768:26cTcjNp0oMrTo/Wxf3aurIE2v36vHu5Ad9LRhsFjoVl4v8zQl9BVmZDXXr6WIHR:23umoMtxCu8E2vWjYjoVuUz0qXr1IHR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9896407896fa1eba517dc67622bf6b2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ