Outt
Sett
Behavioral task
behavioral1
Sample
affdc6a671167a5978fcf1bee7bbcafa_JaffaCakes118.dll
Resource
win7-20240705-en
Target
affdc6a671167a5978fcf1bee7bbcafa_JaffaCakes118
Size
57KB
MD5
affdc6a671167a5978fcf1bee7bbcafa
SHA1
cdf9ae626f686565457bd7b10db817dc68d9f181
SHA256
039bab6433c5950ba37b5b9f21e526704a37fc2e8d9c15147e9431adbbec1584
SHA512
91341b028dbe3074dd627f63b6e4f9099275e6138a081f3fc86b54109e71274f578f8070d8ea8965be3a8821ae1585a32e2006f94ad5401101045ea601d8950a
SSDEEP
1536:GQ3tfgXK0I8bN4QXo8Xv1JwkXPVnAP20yE5Hnrv:VfgXK0I8bNXXo8d2WQJZz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
affdc6a671167a5978fcf1bee7bbcafa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ