Outt
Sett
Behavioral task
behavioral1
Sample
abfb64b9d1f34f2fd01ff2c2ff21d6a4_JaffaCakes118.dll
Resource
win7-20240705-en
Target
abfb64b9d1f34f2fd01ff2c2ff21d6a4_JaffaCakes118
Size
70KB
MD5
abfb64b9d1f34f2fd01ff2c2ff21d6a4
SHA1
e102b93260bc89fff002b16902f304068e077c2e
SHA256
cb42339a942a80469f94cec1d51541973163fd21299c95a363ed8365af574cfb
SHA512
e160e98edd977434cd166af237e3fb5f32305937ccfbfb508a8e4ba7a97520fdb4ed88eddaf02c88a408014452433ce196cf25c68b22bab5a36bb490db9bbdc0
SSDEEP
1536:8xdfzUO04U6mVmkgxSrra5pKhKnmX9/I5gA35UeTgLBr0M:uxzUUHmUkgx4rOpKhKy/IJp9ULSM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abfb64b9d1f34f2fd01ff2c2ff21d6a4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ