Outt
Sett
Behavioral task
behavioral1
Sample
af82ce459f56b1efd728ec430ae882a6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
af82ce459f56b1efd728ec430ae882a6_JaffaCakes118
Size
64KB
MD5
af82ce459f56b1efd728ec430ae882a6
SHA1
a5cc6e95a5b815c3b9d855dec52e700f8aaa89ff
SHA256
96ed9f8eba5428cd9e511bde5d0639af806c1a7dea5ea58393316bac72f8c1ef
SHA512
71c097dac66520dbe6f29e6966630ddc31e09b66b8574d361061c8512b4eb0c3a27df3286c5add17f39102ab1807e723f9bcad89bd36c83b6991e8641a11a75c
SSDEEP
1536:mPO6KEVbsVP0gOVQ/1IlYPSDdF4rh/TLSf/2YaJgAWL8eDgOWtpoYjvKR:cMEVbsVct3YPi6rh/6GJgAq8ePWtqqiR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af82ce459f56b1efd728ec430ae882a6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ