Outt
Sett
Behavioral task
behavioral1
Sample
af7778ea1edaa77c607637f0e6cdd1a1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
af7778ea1edaa77c607637f0e6cdd1a1_JaffaCakes118
Size
61KB
MD5
af7778ea1edaa77c607637f0e6cdd1a1
SHA1
bff91ef0ce273b94c8e1d77f718c0590a2043309
SHA256
9a89d22f8bde751e693e13f3d430337395404b374c46872e6ddd1ec79886db50
SHA512
6611dce3974c451386b5a97cf01865997c6871374bc265ccd477f19ae2852dbb1ac991a9e048f9142b9fd577e697c03e564d4a6e2301f9eb85933917ac45afb6
SSDEEP
1536:yl3E0T9yd48qkrQCA3f38TRaT8Uoq34oCZmo:E39GjrQCA3zYcItZmo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af7778ea1edaa77c607637f0e6cdd1a1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ