Outt
Sett
Behavioral task
behavioral1
Sample
ad6f7fd3a3fc3145a601d2918b0f59c4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ad6f7fd3a3fc3145a601d2918b0f59c4_JaffaCakes118
Size
46KB
MD5
ad6f7fd3a3fc3145a601d2918b0f59c4
SHA1
b3540425193e8ea35fb5ee3e6bcd6ae24435f8c9
SHA256
2419d42a043338d957f53c27592e24adcc19776aa6a2370c729e8d5953338dcc
SHA512
b62e2adfdda957167bb17413fe64ba87de0787c9e25cc7dd1bbdee543eea249ded9e870607eb496f303081574f74456a95c18c19d5b57eb355991ac28ad3f2d9
SSDEEP
768:1zExMf4sJGHw2jnS6uZgVnT89QfI5W0W0O4ZiI9MQCk5M+malMmdPuNZvAjuu:1zExMwCGQ2jCKfI5soiI9MQ35MKtdPQU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad6f7fd3a3fc3145a601d2918b0f59c4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ