Outt
Sett
Behavioral task
behavioral1
Sample
cf1ab7d29bdf4a32c26b3f3125148ba9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf1ab7d29bdf4a32c26b3f3125148ba9_JaffaCakes118
Size
42KB
MD5
cf1ab7d29bdf4a32c26b3f3125148ba9
SHA1
2922c0a3633b182549b6126fc0e1197a5dd28a7e
SHA256
24da28f54226d78b60ae588c3ad57a682b8b09d2f92b3b9bc61d03cf904f2d7d
SHA512
df028055c112a7bf8caef8224c6c6131f2af9e9d0dd82a606454e412c14b0e05d5526b6a5c0506b3f8c689cbe002a16895f4f7d6e8819fae5076575d86f76a0a
SSDEEP
768:nbY4lNQkIE4wcv9xG8LN3A1hItoKf0pzqlX0JS:EGL6fG853VCKazqZ0w
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf1ab7d29bdf4a32c26b3f3125148ba9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ