Outt
Sett
Behavioral task
behavioral1
Sample
cec9ad7af2cb56a6bc8de9077463a8d6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
cec9ad7af2cb56a6bc8de9077463a8d6_JaffaCakes118
Size
70KB
MD5
cec9ad7af2cb56a6bc8de9077463a8d6
SHA1
bfae9c838e703775148c409f56c0350baa146e71
SHA256
65b66714d9731fa6cedebdc57190e6eac97c92b0845ba143103a1449c8841587
SHA512
0a095fea9124010490611317a2de3b4f82bc432fc8b400a734b80dfce2c1e5028e99338c4055291c6147b8b83789260a53bb3edf011c41fb0256a0621141440a
SSDEEP
1536:RVN/WTrZ4WRt1b69m+UcjlFi26Nz9ddtws+BoStgT:TN/EZXLk9dNwviuSto
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cec9ad7af2cb56a6bc8de9077463a8d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ