Outt
Sett
Behavioral task
behavioral1
Sample
af6db82214b3f5b72dc5a362b0e53f6f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
af6db82214b3f5b72dc5a362b0e53f6f_JaffaCakes118
Size
70KB
MD5
af6db82214b3f5b72dc5a362b0e53f6f
SHA1
4bfec165e5191be687436b27687fb1aed4257b13
SHA256
bd13d52119111c7b5fe75d24ab1845c321f6df3402dbdfbff91ecd8705056ebe
SHA512
b0257ef359f958f5543adfae0cc072262a443a9c6beb79f4c2e1911549a8014c38ccf3ca42461521a82fba6be4e2528218ad9f5e5c401f312f7cfe881511eeb1
SSDEEP
1536:Bm1NGJVGfpJdM+HwzQ/XZMZbz4KsTN1tMQcjf5:kX0Vy9MqPkbz4KiN1/c
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af6db82214b3f5b72dc5a362b0e53f6f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ