Outt
Sett
Behavioral task
behavioral1
Sample
ab7b4604f0fa631d9c6d8ef1dcdc0919_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ab7b4604f0fa631d9c6d8ef1dcdc0919_JaffaCakes118
Size
80KB
MD5
ab7b4604f0fa631d9c6d8ef1dcdc0919
SHA1
70c7b321e4f2aafa00dd0f7e0758d49fa3ab3fc1
SHA256
a650d07d7891b95697d7090fea20ce86e3e32dc68e3c5443d048d86ac40a23d0
SHA512
d9c2340e0025b41bc93983a54196b19dfba509e8cdc422042389f1b9995bed14431adb9a78f2cd0879dc64c9f9e8f647b71b1238d7c8b993496ed0dedf5464e1
SSDEEP
1536:Bm1NGJVGvyS2izHdaUUQBwWxMXA9+MtpJIwyGfuV7bOD7gxlsXabc2:kX0VjWVzH9yGmVPucBA2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab7b4604f0fa631d9c6d8ef1dcdc0919_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ