Outt
Sett
Behavioral task
behavioral1
Sample
afba6f8b4f2d187a0260310b7c6fe775_JaffaCakes118.dll
Resource
win7-20240708-en
Target
afba6f8b4f2d187a0260310b7c6fe775_JaffaCakes118
Size
66KB
MD5
afba6f8b4f2d187a0260310b7c6fe775
SHA1
241e441f3795902d323b49eca91ddffd0e133082
SHA256
aaf924cdb4a79eab87f4d9d8ab1f60ad8f8158e26d844467e9b42a2c8715474d
SHA512
0cea721af19787dffb654bc771061ae8fe3bbcfca2ef207e0788ec62f938bb3a7826c2c4fb670c66297225b2b9bd960c191faeadfebe14959d7f93fb43061f10
SSDEEP
1536:GQ3tfgXKDZqElmUslqMY2/eNbHQ2Mf10KG5o35jgpfwPYrNqx38:VfgXKFqE4VqMd/ETQ221tqpWYrkR8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afba6f8b4f2d187a0260310b7c6fe775_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ