Outt
Sett
Behavioral task
behavioral1
Sample
ab7f29fd28cb9bc41cf4235538130c1c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ab7f29fd28cb9bc41cf4235538130c1c_JaffaCakes118
Size
65KB
MD5
ab7f29fd28cb9bc41cf4235538130c1c
SHA1
d49739547709fe1a05cca556196280d609169765
SHA256
ffc505e5c28c508fe63462c957648de3ca0c1865722cc51239c29db091118ef4
SHA512
7c72cbfbbf8cc0a76dac306f6b646b8f0c008e626ba1190de15808df22f6235c76b849eba1881a1cc7bc8b60b85d6dacebabee89bfcb1eb31b347bced5da26a4
SSDEEP
1536:4sKXE3uKn+VXIAgkZxVPMe4Z/GYS3qIuJwT3A/73Ja2/Pp:NN+1IAgaVPt4cYKqIuJaO//x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab7f29fd28cb9bc41cf4235538130c1c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ