Outt
Sett
Behavioral task
behavioral1
Sample
ad8d28aac90e914ec382bbd9e7a93db6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ad8d28aac90e914ec382bbd9e7a93db6_JaffaCakes118
Size
67KB
MD5
ad8d28aac90e914ec382bbd9e7a93db6
SHA1
cc0cd42e18aef1cf6e06c05c5cda3e8b073702a2
SHA256
98b61b1b43710f9b8ee18d98aca072a5e511e16113856eca1bec7c529d46c432
SHA512
e4c38c71a4b884b0c293f423b513bd90f9269407effad1b2d51e6ce01bb80012cebcf6c4bad856468e71a0674dd0547a0e41ec5731431ed1f9491c8a801e6ff3
SSDEEP
1536:RV2KRFNyHhDh2ICvRfzmRGgauM07wLoJm:T2KRFNyBF2xpfSRrM07E6m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad8d28aac90e914ec382bbd9e7a93db6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ