Outt
Sett
Behavioral task
behavioral1
Sample
2ae1fcabfb3cc98bd06c37d520e54851_JaffaCakes118.dll
Resource
win7-20240729-en
Target
2ae1fcabfb3cc98bd06c37d520e54851_JaffaCakes118
Size
59KB
MD5
2ae1fcabfb3cc98bd06c37d520e54851
SHA1
29b9b9d44f768b74e83caac0469d90086cf0d605
SHA256
257300a0e44f7891bcfcf9fca289e9a7814518d7e5a18ba314f1797425819e72
SHA512
d793f25f7a84f09388c6cebae5b8af9e22f3281fd7f363d390bd41ce8050bfa92f097e01f7af4e75892a4bf0d4b651da3d7b2060e6a44a929d3737a50aa928e7
SSDEEP
1536:n7ZLNPp9pZBMxtxR6t0fWc3//0BwHj+C7KP+MwYqJ4:7Zpp2tmt0ucH0ij+CGP+rYqJ4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ae1fcabfb3cc98bd06c37d520e54851_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ