Outt
Sett
Behavioral task
behavioral1
Sample
eeadfd5ad1d29309f5f17cf36c9360c6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eeadfd5ad1d29309f5f17cf36c9360c6_JaffaCakes118
Size
69KB
MD5
eeadfd5ad1d29309f5f17cf36c9360c6
SHA1
2a9fc9519fa85d836bccbf05d9fbf2c6fe7c6a0e
SHA256
565dd5a0164d2796c53bb7406444457aa519506256b3418e691c029c750a8270
SHA512
dd6b626bb41ac0eecf56fa888c3aa96c51e0c24ba4d14f0f6bf88102187e722505c3c8185a2fc18d357cb3691104b4f7d82e9b433187a77933db076d068f621d
SSDEEP
1536:s65kurtwqyMOo3zYO93y8JUsbpVK6p5dQRe+a4qz:trGMp8i3y8JUsbpQG/Qw4qz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eeadfd5ad1d29309f5f17cf36c9360c6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ