Outt
Sett
Behavioral task
behavioral1
Sample
ae07cbf464488ae162fa6fa5a3e536f0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ae07cbf464488ae162fa6fa5a3e536f0_JaffaCakes118
Size
55KB
MD5
ae07cbf464488ae162fa6fa5a3e536f0
SHA1
941b7624019582ceef075917d0eb717df759577e
SHA256
28a6bab1c14415c7fa3f4f0d39d850a787f62059619fc80921a2dc868272b084
SHA512
3eee7095dca17594c3ca497e04438a8313a0e839b20057d21e17c6c9be429e41d7175a3d095d92f82fbd9f0d50ec509e7c3297fd59f161d052be1f8a88175411
SSDEEP
1536:jZIcCxRaVsUnZXijwk9nQ4OF21cicEr4mF8b:x+cRZXolQ4OF2GicE8t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae07cbf464488ae162fa6fa5a3e536f0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ