Outt
Sett
Behavioral task
behavioral1
Sample
ae456343f9f95bbba50afb1abe84d050_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ae456343f9f95bbba50afb1abe84d050_JaffaCakes118
Size
56KB
MD5
ae456343f9f95bbba50afb1abe84d050
SHA1
730e94016f22d1aa7a9bde5a032a5c902137e475
SHA256
4930dbd133c6e462b676646b5c56da4b8f3b38af25fd07758945edfeb1b51868
SHA512
97805219d91dc09f31fdefdd28301e7b5be80b0ee52fe5e27bdb77c8c3675c54907294214546f8ffdb3ac92c5726efccff29c46286319f875e103df5ba483e15
SSDEEP
768:kHwfLvO380aXQuDnX2mv8vhinqz5rF4O5qKI8Z0bMUDlCrSOw8NrbFdlnUDwLS8N:kQfr0uDXzu7z5pqKZUvDlCrS63mHpk8U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae456343f9f95bbba50afb1abe84d050_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ