Outt
Sett
Behavioral task
behavioral1
Sample
af60d70e333e5ab16452eca3ea7df5e0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
af60d70e333e5ab16452eca3ea7df5e0_JaffaCakes118
Size
71KB
MD5
af60d70e333e5ab16452eca3ea7df5e0
SHA1
38e3fa2b00ff2728f87dae87352155d9e47a85d9
SHA256
2080de746b4bdc85310ddf24bd92360a15ce44b84066280b34d45328866b488b
SHA512
9f28255d7b86a067a69b6b5e3bd1400cb7949022fc31b56c6efdad7ee8665b562d749b6c6693382e72105031e123f2e1e1f61c441981d366ea0e7e8a1cb4338e
SSDEEP
1536:5jRmOc2OwVEiw9ezYgxIvTjvUDamfInTHmwg:xfiwV5w9RvToDDfATGx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af60d70e333e5ab16452eca3ea7df5e0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ