Outt
Sett
Behavioral task
behavioral1
Sample
ef024b5b65ea6ace1cc19bc9225bbb0a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef024b5b65ea6ace1cc19bc9225bbb0a_JaffaCakes118
Size
54KB
MD5
ef024b5b65ea6ace1cc19bc9225bbb0a
SHA1
f2653ef458bad1e496fd0ecf04661ede93f713a3
SHA256
18489c88d51ac26272a8969ded45a0b613221ab6f7eefbffc247d84498925367
SHA512
e918bde0ff79a71f4d76bba3ea86e74b599898aed21f7c4951ecec451bc59d2065ceac6e81533854cd75fa44075466bc22e563dc04afda7d13cd92b90a212001
SSDEEP
768:szM2xVV3My9FwketXbVh1+C2cgLw1/qw2/ffVhF3avlTjblzZ2BOIom1QsAqLFf6:V2bHPeJbv2RcO/nVhJuzZKfF1lAqpS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef024b5b65ea6ace1cc19bc9225bbb0a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ