Outt
Sett
Behavioral task
behavioral1
Sample
adf2ab22155abc4b5bf3479b65cbdffa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
adf2ab22155abc4b5bf3479b65cbdffa_JaffaCakes118
Size
60KB
MD5
adf2ab22155abc4b5bf3479b65cbdffa
SHA1
519102cd95affc06a5419ddbb59355ccb15d5878
SHA256
279cdefcc42f6db8c094858cc4dfa461dcc32484d1e440dd8eb70d56cd2fdde0
SHA512
9d14ad123aff091f4e785f7983387514b9223fc67556c06cf9442fe8a697793d8a43926297f965144333a9e1cf512ce1c6f9370d26d2ae0bea02b420a1ee6a0e
SSDEEP
1536:agF0eiyUcbCSwt56zw5cWOIg8aY0kt+uMM0h380:t2yFeSErgt1koZM0hs0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
adf2ab22155abc4b5bf3479b65cbdffa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ