Outt
Sett
Behavioral task
behavioral1
Sample
ae68160a4cd1ac6810a8ce6687019d22_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ae68160a4cd1ac6810a8ce6687019d22_JaffaCakes118
Size
56KB
MD5
ae68160a4cd1ac6810a8ce6687019d22
SHA1
bdcb163e8eb7ebaff1522356afafe2653d07cede
SHA256
c4246745a5ccfb7955576bfdbdfb269d9ad382850d6d72b957226f15674ee840
SHA512
a8675f2f92e57273058d1595099e9c037969c088cecd09199aca3f64e0ccd71dcb48e589bb2ecdf883fb3b5a2310dc1e813a6f50d466dc913921f9f19e2c9222
SSDEEP
768:szM2xVVqpSsQqO9KAwNLk5fCO/OvUn7zWf1+CXRstht7aJUGhBv0UzL+lqt9T/uW:V2bKVOsNLk5aPvAWmN7aJnXvF2wfQQd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae68160a4cd1ac6810a8ce6687019d22_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ