Outt
Sett
Behavioral task
behavioral1
Sample
af756a35859888ed29acd67a034f0cf6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
af756a35859888ed29acd67a034f0cf6_JaffaCakes118
Size
55KB
MD5
af756a35859888ed29acd67a034f0cf6
SHA1
9314b881057dc82283204e1f5cf173dd0f8455bd
SHA256
a3d0f4f6354c90c8ebaf4c5b46c94e5be3c6f4ef01836b6328ebf3fed9521324
SHA512
20a224a452dc14056cc7fc49e14a531c43d271dac896505e085c4a0e5408e13074f4b04673f1ca00fae6c2a095be5b8df417cdc96f933be6c3252f299b27edea
SSDEEP
768:26cTcjNp0oMrTo/Wxf3vFKBorx8oAaBM5cx9H6Fo5Eb5g/OOiONJvJRLW3Y7iqpw:23umoMtxncYx8oAp6BPEbOddhd5bPs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af756a35859888ed29acd67a034f0cf6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ