Outt
Sett
Behavioral task
behavioral1
Sample
efe6a93dd1d64c8416dc6cf4105a3f6e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
efe6a93dd1d64c8416dc6cf4105a3f6e_JaffaCakes118
Size
56KB
MD5
efe6a93dd1d64c8416dc6cf4105a3f6e
SHA1
0807575acb8e69a6c53d1b5c0bf860642a3ef9eb
SHA256
12490238b1adfe55b48ee7fd9b48abb52bc90574500148e2cbedff313e77e216
SHA512
a62adc7c4ab4398692c797ba4eee9d0d1b7ef2a0c429468db3784e2fa32810d11e58e69aba9526b7e2b88d4f07d0b49d58d1feccfd6262af854f6f6b87c2dff8
SSDEEP
1536:ob8Vwn/QUS8Ep7X6f3jaYiQ3RUEs601dusTx:oz/QUuhXY2QR9MvF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
efe6a93dd1d64c8416dc6cf4105a3f6e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ