Outt
Sett
Behavioral task
behavioral1
Sample
af94ef4674bff75a4a0d2d76100f6471_JaffaCakes118.dll
Resource
win7-20240704-en
Target
af94ef4674bff75a4a0d2d76100f6471_JaffaCakes118
Size
56KB
MD5
af94ef4674bff75a4a0d2d76100f6471
SHA1
99ed1b0f8ef6f7efce12f08b3beed21d25fcf506
SHA256
967ef7af3cdfeefb722a716bb574a1f060a7662796808cd72af5c98efcbf65ea
SHA512
f8c03ecffc72f1d29d9ca7de6e6a763923958b4182acd05b30518e28499a4ce20f40100e632a5d749e532eba1a71b5c0e780a0386f81fee7f92b720f5e5961d6
SSDEEP
1536:GQ3tfgXKd8nJCJFTtFwrT8Aw0IzTju4tNIkcd:VfgXKd8JCJFhqPVqzHu4/Od
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af94ef4674bff75a4a0d2d76100f6471_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ