Outt
Sett
Behavioral task
behavioral1
Sample
a9abfee8fd4cbfee5317b99bf518dc40_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a9abfee8fd4cbfee5317b99bf518dc40_JaffaCakes118
Size
62KB
MD5
a9abfee8fd4cbfee5317b99bf518dc40
SHA1
1242249190de1138151290cccaf37a231da98ed6
SHA256
ddc7caf4af303bf6e1449670a011748b52b8224b901647e10745b11b4bff496c
SHA512
5cd01f7b97ab4ccf5737cdf7203988b27fff324d0885fb2b90355a66e8cbdb25945c714149aace198e73f7ddbff5648147d4f8d3d2759b4010c81cc3edae0a31
SSDEEP
1536:OBRVgrExucMh5bgVI/2FsyDzOBFdo/P6GU2CYmVMQ+f4x2P:ERRsVbiI/SDw0P6GJ7mVMQ+fN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9abfee8fd4cbfee5317b99bf518dc40_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ