Outt
Sett
Behavioral task
behavioral1
Sample
ef24a5070be4faf7665be883c1135c03_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef24a5070be4faf7665be883c1135c03_JaffaCakes118
Size
55KB
MD5
ef24a5070be4faf7665be883c1135c03
SHA1
faf947341031725c2e3201aeabf1e199b7a60fdf
SHA256
62e619a022894ee7565fc2836412902fe551317a52db4237636aaedc84c8266e
SHA512
d79b3847a677c9175704a61eb910c9f760c460fe69c38cb14727320969203177bff7e43391b378c2125b8e651c11f892d5dfc7c12aed8ad583e9b0a7f0ec53b4
SSDEEP
768:GbvLDaaMact8TcOYBnXEKdmlQUe7f8YuAQd45j4jl+qpiaGzDQM8zhgIu2vZC:evxSZdKQUe7/uAX4wqp0Qrmr2hC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef24a5070be4faf7665be883c1135c03_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ