Outt
Sett
Behavioral task
behavioral1
Sample
ae29d949d014df00a32b31b00140c30e_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ae29d949d014df00a32b31b00140c30e_JaffaCakes118
Size
53KB
MD5
ae29d949d014df00a32b31b00140c30e
SHA1
cc32043c645d9b8843c8446b78504d86c732d247
SHA256
b99a85e3bf9de5b419d8fbb9d8b5ba7412b542b0125ee6a30518f6e6131ebca1
SHA512
08904504623ecaa39b329a3758d083878330e8b36f7243bb329fc5727c8031928d774505834a25cb24c5eecb532903d89593b983fcd3dac2794e5ca1b095c2d9
SSDEEP
1536:V8O9Nn6Rjrin0vSaiudz+Z7EaYbbhkP1l6LAg3:2Oz6VWn6XZ89Erb2tQLAg3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae29d949d014df00a32b31b00140c30e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ