Outt
Sett
Behavioral task
behavioral1
Sample
afd9ac86e2bbf6b702bb588040f354be_JaffaCakes118.dll
Resource
win7-20240729-en
Target
afd9ac86e2bbf6b702bb588040f354be_JaffaCakes118
Size
70KB
MD5
afd9ac86e2bbf6b702bb588040f354be
SHA1
9c5f5860685a7d4df4b4be33da8e4cbb802ba685
SHA256
c5f1f1068311a2eb84c6739c5344f8399d8d502dfaad07363e20f6737700e137
SHA512
a14600037ca1f81af09adc162f39439f647ec2b4b60ed82fb818ec927b682df99f9a9882b3e62eef9e4c62d0c5b3fb4bdbf1bd345f435d66a4a04e02bf09a2c0
SSDEEP
1536:V2bAUtLs35sDNh0ljfeA5HdpcnxbFZ3tBXgK2c4eV5wQZm:WACLs3sf6fp5IxRZ3LgK21eXw3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afd9ac86e2bbf6b702bb588040f354be_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ