Outt
Sett
Behavioral task
behavioral1
Sample
aee923f6005e7a220dd3305270057f49_JaffaCakes118.dll
Resource
win7-20240729-en
Target
aee923f6005e7a220dd3305270057f49_JaffaCakes118
Size
69KB
MD5
aee923f6005e7a220dd3305270057f49
SHA1
8fbf6ca20903adc5be330e5d7f6ea6fefe636c2b
SHA256
00ff78d5515ca5ddb0c6786aed751ba994fcf2b7f23250a44bb15db2c8049ee0
SHA512
811e136f5ce65da3f9c31facaaf9fbbe51d358d8444168d79b466c89affc73f6499c76fd05386cf3cc9a305083d338e45bfe5e970717762a4ad64f2cf34d8b3d
SSDEEP
1536:agF0eiyUcbM+xUsvQMB9f+GcSEMnHH3d7Bmxm0lVcXGRW:t2yFBxNB9fESEKH3dtOOR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aee923f6005e7a220dd3305270057f49_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ