Outt
Sett
Behavioral task
behavioral1
Sample
af4be500b035adb710238c9dc703c71d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
af4be500b035adb710238c9dc703c71d_JaffaCakes118
Size
60KB
MD5
af4be500b035adb710238c9dc703c71d
SHA1
65080235b9a2124662fc642827ddda895a648696
SHA256
965712526fcbdc62cf4781d5b1f0f7987b052c46ad1d48cc4f98920fd0690bce
SHA512
42554e9f7a0056b89a429ddd16094242b232834c5019cd8d0e2727166aabc913d4a49198cd4f84345c5b22c51e9a9ecf677328d12aba0d0059e73ee8883bf314
SSDEEP
1536:soa1lMWir6seMHwr3kNRlD80bgXVwO92dRnG9yOPX/3fy7wvW:SMWir6sLwr3SlAB4cys/3q7MW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af4be500b035adb710238c9dc703c71d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ