Outt
Sett
Behavioral task
behavioral1
Sample
aec8e07ed042560291c2d6c53612e76d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aec8e07ed042560291c2d6c53612e76d_JaffaCakes118
Size
49KB
MD5
aec8e07ed042560291c2d6c53612e76d
SHA1
710cd02139922a49320d2dcd6fb2bd50954587f4
SHA256
5e99fb5fce5b95696e4eaf32b6b869adaa7375f65aef274ed80646f37f47e590
SHA512
fd947a72c372b0f8678cceed090c09cfb6072cb5502bceba5839664fccf8a1bb56b69f840ce7b5d59ed5c15534218f54bf3294fc1e4089f959d3822a4294dd2f
SSDEEP
768:9xBtKtqyLUtvUZw6LVn9mrGw2MdTXZqNeONqsMUdBezKVJjZuimEDd2t3w7DYd7U:9mPcpfdlrOElHz4RZzhDd2JJdMf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aec8e07ed042560291c2d6c53612e76d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ