Outt
Sett
Behavioral task
behavioral1
Sample
af777b1b11534feb805e1f77d8c702d7_JaffaCakes118.dll
Resource
win7-20240729-en
Target
af777b1b11534feb805e1f77d8c702d7_JaffaCakes118
Size
47KB
MD5
af777b1b11534feb805e1f77d8c702d7
SHA1
005e5e9ec977820356edff0a8d036e15b0f3d655
SHA256
3b1ea7cb58aa4fedca3e47d6b980f7151ca0bdf1d25aae07ecde32ab7ebc23d7
SHA512
8c2c63f3c7e5417eb193d93b1912e4e9376e2cdc95312efdd0513eade6f0d078be70617b8bbe4c9c8a85375061e7d9afd00fb5009b625a9aaeaed8c081d642eb
SSDEEP
768:YJEp5e05ZVKjHyIXjWt2tL28yAklMvXToIgX4jEYVvntzZC27e7xpjZw:YJEu0nVKbyIzsQiVAkkox4jEUntVC27L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af777b1b11534feb805e1f77d8c702d7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ