Outt
Sett
Behavioral task
behavioral1
Sample
ad90a0b30c479ef1df168c6def1d6869_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ad90a0b30c479ef1df168c6def1d6869_JaffaCakes118
Size
47KB
MD5
ad90a0b30c479ef1df168c6def1d6869
SHA1
f631cb0bd4141f6a0e7eb8675fbbf1817bf0ac11
SHA256
c922970431142c10891759a820f7043cb0fdd87362d6b9aefd4d69a22eb5be43
SHA512
f4030090fa23ac882d18c02048e8beb1feaf1a33b544fb3f5e28a9c0517f02da3c626482d2978e855bc22a2220f06646c8f7fafa46f62a29e314151545bba22e
SSDEEP
768:wX7l2i4+6WhcbSiaZfePO9KOK8THjX0Vn8ZWd0p9T3j3aRF/+OlM9cEbjyJ0ZxzK:wXx6VYT8rKHjX0ViWd0p9H8l+OK99jnE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad90a0b30c479ef1df168c6def1d6869_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ