Outt
Sett
Behavioral task
behavioral1
Sample
cfb997f5c9cd7fd8ae3275ef548af7a5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
cfb997f5c9cd7fd8ae3275ef548af7a5_JaffaCakes118
Size
72KB
MD5
cfb997f5c9cd7fd8ae3275ef548af7a5
SHA1
c6d9d8a6673fe974c9844310a6758372c3839537
SHA256
07fe9142448a57e7b736faec488e4fb064397cddbd54c89f00d0a03e4d99150a
SHA512
00a9f0dc459f9dfcb7bd40baf82fba3ea213a216240f138221462f212de444774ad560f607197dad27cae930433fc1ed98c32ff8c922161ee69621b4531a7d4c
SSDEEP
1536:evkL7DNccbK/pRZnU0grg8vrecOK92aNtDdb3Zmhi:lDHkpRZnU0ITIKJTBMhi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cfb997f5c9cd7fd8ae3275ef548af7a5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ