Outt
Sett
Behavioral task
behavioral1
Sample
af5cd8c8b60410719317fe8fafb90d7c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
af5cd8c8b60410719317fe8fafb90d7c_JaffaCakes118
Size
78KB
MD5
af5cd8c8b60410719317fe8fafb90d7c
SHA1
0a3aba5d8f690612676c6a960a67d0a45cf5d753
SHA256
aa946405a24d02312703781cc1ce1a4af4224fa50319eb263daa2d87d24d6484
SHA512
f9313d48496631a2995dd59bba799b0c7093061a6e44012ec95d4827539e6d702df30e3c48c7ad265ba84bb5e1755af085ffd444c029224523bcd7b24ead56a1
SSDEEP
1536:tciT3IXgZYPkOrI4VDHsWeBMako9CxXi6vk2LL76VnS3kY57:yiT3IJkKVzsWsMVxBvDLL76VnS3F7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af5cd8c8b60410719317fe8fafb90d7c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ