Outt
Sett
Behavioral task
behavioral1
Sample
afde7e67b694bc7827c1a9670ccd50e9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
afde7e67b694bc7827c1a9670ccd50e9_JaffaCakes118
Size
69KB
MD5
afde7e67b694bc7827c1a9670ccd50e9
SHA1
224c6fb089ac2f2c266c4a7f740676442b31f689
SHA256
e8aa975bba1cee0751c6ba0dbfcc7ae25737422248ad1684c887479cacc510dd
SHA512
93cd522d205822d2e28ea09d61a6729d899b4d2ee49c1dbb4c26ce76ad8cb43e9339efeea25f08fd125691f57660abbd0110f26a1ed6d73914daf35b9d36b069
SSDEEP
1536:EGLfxqkWiwvAaUXGfawqdXQM/qMEVFJxJ7:EG4kZkTbQQWqMC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afde7e67b694bc7827c1a9670ccd50e9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ