Outt
Sett
Behavioral task
behavioral1
Sample
af134f548511743d60e0f26d8a1435ee_JaffaCakes118.dll
Resource
win7-20240705-en
Target
af134f548511743d60e0f26d8a1435ee_JaffaCakes118
Size
58KB
MD5
af134f548511743d60e0f26d8a1435ee
SHA1
abea6ac32475482953dbf5e669f90059c64f385b
SHA256
c203a9a4041fd98f8812b3c88f888134282882e85e6668f7b58d678888a378d1
SHA512
94381d7ff1425b0540ad0f4b56f18500ff46dcba870854ea02467e59971749cbe92167b717c8982b2289764df06a3769d40f85f358ef7b29cd37c1446a7868c0
SSDEEP
768:nbY4llqCjeMsS9lYBnb7pZcI6snv5+rg32SgpQp8WE6rYR/C05vmNnC:EG5qMp9liz6q32SJaH6u5+NnC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af134f548511743d60e0f26d8a1435ee_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ