Outt
Sett
Behavioral task
behavioral1
Sample
adbf445169095c2c75447c2f463df2d3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
adbf445169095c2c75447c2f463df2d3_JaffaCakes118
Size
76KB
MD5
adbf445169095c2c75447c2f463df2d3
SHA1
bc8b84471f71573b7a8e0e6f5e92c59229aa8987
SHA256
510fa87ddea52ee6fe014f7c91cdb1bd5f8c2b8892ca029270d8b93cf5d65f5d
SHA512
431e28ee5ba55daed1c91f2159bbcb9acc32d84b4c8a7a33602f85659f63377fffe5bd075b213d012de23bd32e5d37303b169be6558c9a0f2bf71dfa9596d352
SSDEEP
1536:1zExMwCGQ2jmjLAnyK2C1Hh5UtuIgFsZ+SakReWsG6rIwLtbQ3NZ7+BFIec:1I+wCGvyj6yK2CZhCtu/FKzJwLtbQ3N9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
adbf445169095c2c75447c2f463df2d3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ