Outt
Sett
Behavioral task
behavioral1
Sample
ae0599b64ddf9109b9ba7b9f83925584_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ae0599b64ddf9109b9ba7b9f83925584_JaffaCakes118
Size
53KB
MD5
ae0599b64ddf9109b9ba7b9f83925584
SHA1
66c453a880ef62fdb2045d9544af07706f8f125a
SHA256
90045d6fe526c9f0b328fc18ff6d8bee65b1fa51ec23fcd3fca15e2ec816479a
SHA512
2e1f5d872a34885bb1ec9cd5f0e7f9c083a06d64f264561d59c12fbd49b3cfb6ba7c78709add8d6af0739f60a48c1505b3534657df74a672ed0f94d501360f95
SSDEEP
1536:OBRVgrExucMANqjI4AsbGdUmOZGZz7XopFe7h:ERRsWNqjHydMOXuFQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae0599b64ddf9109b9ba7b9f83925584_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ