Outt
Sett
Behavioral task
behavioral1
Sample
ada8735cc8edc59767e4ac5aa4d005a2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ada8735cc8edc59767e4ac5aa4d005a2_JaffaCakes118
Size
34KB
MD5
ada8735cc8edc59767e4ac5aa4d005a2
SHA1
7b303a55b80d7934e68c7708a95de385d875a869
SHA256
6a765ce03e9005779ba4c156e1be9fce70e08f172b94814f478898b9de6eb948
SHA512
ce0485b26bc7745ff14334ce0571c278806669fc98c2c1a3e9ad45719ed58a21fb9c50590d686251687ef017115f7ae711acf325d61fbdf9ac01952adf6c3a7b
SSDEEP
768:9xBtKtqyLUTmfI7jPziqirlZsAclgmQZ8Z:9UA+qiZZiQK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ada8735cc8edc59767e4ac5aa4d005a2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ