Outt
Sett
Behavioral task
behavioral1
Sample
aef18e286dc83616f56fe6f40811bf2a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aef18e286dc83616f56fe6f40811bf2a_JaffaCakes118
Size
62KB
MD5
aef18e286dc83616f56fe6f40811bf2a
SHA1
07195307d890b855c2d6e20b2d7d476ad9282120
SHA256
fa74f88790e70f3bd8e85f4df7c7bb82e90adc1c34d878fa73f90304a979a87c
SHA512
74f9053972b8831378caa6b730e28bfbd13cb6c8c1f0b9210563a28badaea64e163f5e45a471eadbbe1fd6546cabb690728e7a5bf956b57c43fddfeb5dc751c2
SSDEEP
1536:MhBRVgrExucMibPj8eNh9fPJMMehaY54gyr5DLgu8AJfD:cRRsAf8eNhZPO7IY54V1DLgYJL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aef18e286dc83616f56fe6f40811bf2a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ