Outt
Sett
Behavioral task
behavioral1
Sample
eaa7ef5d1e640a7a18d9e54aadbc72cc_JaffaCakes118.dll
Resource
win7-20240704-en
Target
eaa7ef5d1e640a7a18d9e54aadbc72cc_JaffaCakes118
Size
53KB
MD5
eaa7ef5d1e640a7a18d9e54aadbc72cc
SHA1
7049185351a3a2fec7e4433d5b67c69ddd80b409
SHA256
32a2fe6c4df1bdcca31e52555b8a74056b763786d38bb16f11ed352b4974c903
SHA512
7b062856ffa8ed62b0a31afd71a0f704636d22df5308e95bba84d277358e58c3e9f7349c1158559824d90eac41f5ab91c814fa7ac621d8e5dccc127fe1018ddb
SSDEEP
1536:mPO6KEVbsVP0gwdzjyKOGTajZ5BIlJnxMLtVQ:cMEVbsVcfuKOGTUtUJnx4t2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eaa7ef5d1e640a7a18d9e54aadbc72cc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ