Outt
Sett
Behavioral task
behavioral1
Sample
af1e7b97969358e638cf60f5d784a905_JaffaCakes118.dll
Resource
win7-20240704-en
Target
af1e7b97969358e638cf60f5d784a905_JaffaCakes118
Size
46KB
MD5
af1e7b97969358e638cf60f5d784a905
SHA1
462c5fde5fa09144facc6ab0377dfe811fb408b9
SHA256
833882def4428a5dffe42b20346d01c22cbd7d95b863ce68100b3ecb09918314
SHA512
7502e5d62fb58d683ebfbe4b1ecdd4c8f966140f73048c142dd770cd506e06c83f5944f9965311b25fff36ea0a01f8a2057eb1b794d11022bec688540a0f7972
SSDEEP
768:yuUr3ip/IHI7NQTvODgKbNbZZruZmvNKHLDanDKu0PbQdWikz7Whu19m:yl3E0Tm0sgpa9LdRqWh+m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af1e7b97969358e638cf60f5d784a905_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ