Outt
Sett
Behavioral task
behavioral1
Sample
abfc7d1b5dde01aa425d91fd4c4fdd99_JaffaCakes118.dll
Resource
win7-20240708-en
Target
abfc7d1b5dde01aa425d91fd4c4fdd99_JaffaCakes118
Size
58KB
MD5
abfc7d1b5dde01aa425d91fd4c4fdd99
SHA1
597feba2a009d8008bcdfa256051b01271232cd8
SHA256
c1873556eb476b15c651eb219a583ed76b666b089a2535eb773634e908ed70a0
SHA512
b424491d62a76d49dd539b2ec9ad74d30a4c780b4d3d9b5c5d40ab92a2c7c86fa9f5c4e6d075ef1da2e53624fb92ccccd6c2276f70236996437c726a05b711c7
SSDEEP
1536:MhBRVgrExucMPHdgLfxehdTnFC4HhzDl4MbGcHi:cRRst9iYhdrUchzZRHHi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abfc7d1b5dde01aa425d91fd4c4fdd99_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ