Outt
Sett
Behavioral task
behavioral1
Sample
afb46a519e6f44f5f7bbdc0b7e62db9f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
afb46a519e6f44f5f7bbdc0b7e62db9f_JaffaCakes118
Size
55KB
MD5
afb46a519e6f44f5f7bbdc0b7e62db9f
SHA1
d90b9955dba30e9a9593aca5079fd3f1559d48b0
SHA256
d87cd394501c650e56d9e509c4937c98f1afc4de88aa0536fa076f227c6ed264
SHA512
75e0bd85d2378d5cf4cce3fd4ab0042fdef33465dae44f058ab2a46772a2886e11bd0c29b2bab21400a0cf295b6e399485bc59145b17fa8343eb7940245999a4
SSDEEP
1536:mPO6KEVbsVP0g97OsNPDlr99YLdU3Waouw95w04HBm1tClx:cMEVbsVcm7OkDF99YRQWa+bdslx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afb46a519e6f44f5f7bbdc0b7e62db9f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ