Outt
Sett
Behavioral task
behavioral1
Sample
ef1a7d134cd266b38af66163d8499d09_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef1a7d134cd266b38af66163d8499d09_JaffaCakes118
Size
64KB
MD5
ef1a7d134cd266b38af66163d8499d09
SHA1
fa66afceeb42706a0f1cf4f8bb2df7c6c7c40c7e
SHA256
1d23bdcc1fb9a3f5ad5a5a26a215669c93b235b4452c2c57d1e1622c15538710
SHA512
1afd6678b8f4c81a2e4bf263b0563e19f83cf38bdc2a6f0349b808e8472256fec90509f281130cdb11691a0eeaff66c95e2b9d813377d8fe5bce22172b74b144
SSDEEP
1536:90e/KGf6rjZViivIDiioDTZ9m33dd+YVpnD:P/KGfAj7cuF9cdokpD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef1a7d134cd266b38af66163d8499d09_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ