Outt
Sett
Behavioral task
behavioral1
Sample
ef3a541ad41682b52dac0b296434cf41_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef3a541ad41682b52dac0b296434cf41_JaffaCakes118
Size
58KB
MD5
ef3a541ad41682b52dac0b296434cf41
SHA1
929b71e286a18f84fcc49411045abb3ce9ebfc64
SHA256
32d01ab47bb040beabc8d02ec325b844c341ca6183dd55616fc0515ca03e2b38
SHA512
24e8190e4e941fc6f780cfe99bfa1fbbe8040c45a40545996f8dab7a7d8705a107ce6d21a014a28dc380b9436d9c7dacc50d02bab038ef2271ae1fce8b88d000
SSDEEP
1536:8xdfzUO04U6mSKvBs+87kkXO1pP4c/RzTmpzPoRE2o/HJk:uxzUUHmSKKTte1pQ4RzTwTp2o/HJk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef3a541ad41682b52dac0b296434cf41_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ