Outt
Sett
Behavioral task
behavioral1
Sample
ef4aabec2377a3017654a2e620845406_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ef4aabec2377a3017654a2e620845406_JaffaCakes118
Size
67KB
MD5
ef4aabec2377a3017654a2e620845406
SHA1
0e3faf74eef21229fea226c9e7506cfb0d3ea669
SHA256
67355eb7d35106e7b87c9d3669898b32487e782250f00d5c525ed010b6671975
SHA512
577a249d880103d52a529d9a9e7e8a02048a37211ef0ff3487f096b6ee6ed43a02ad8cc7574155a92fe60918fe691e37e20c95b247937d207bcecbe8969c5707
SSDEEP
1536:evgDMdzZoQ6WJZ/+OZp+6ZAYeySdkxM32OKFj14k:oZXJZ/bZp+6ZAYePkM2OKFR3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef4aabec2377a3017654a2e620845406_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ