Outt
Sett
Behavioral task
behavioral1
Sample
aee33a20e9fc61803bcf1219226777b1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aee33a20e9fc61803bcf1219226777b1_JaffaCakes118
Size
65KB
MD5
aee33a20e9fc61803bcf1219226777b1
SHA1
9d1589e9c3c4be8f3205a8eec74acb2a34d888c3
SHA256
29830f504694766ff35e515c96e5f411b9c454aade3dcb8ca3ce85688c0986bc
SHA512
1fa02ebe9be0b17b9f0f5499467159ef09e0f90086eaef51f6d1f2d15784629f911efb65ecb364620e805b730bff5c6926fdfd3eb568d9f7f43e764d857b77e4
SSDEEP
1536:tdL9Dk8LpayQhZjcQ2zCSrm9EuH8lXOa9Aa6k:n9D/ppyjazCSrpuHQXOa9AFk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aee33a20e9fc61803bcf1219226777b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ