Outt
Sett
Behavioral task
behavioral1
Sample
adbfd06ac232e970d30493bfcd7fddcc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
adbfd06ac232e970d30493bfcd7fddcc_JaffaCakes118
Size
67KB
MD5
adbfd06ac232e970d30493bfcd7fddcc
SHA1
92603803344bda3ea3c3b58b9e01e2f9c737db43
SHA256
7eea97b208e70616237bba41cfd29637b68d1b11068e3cfd3b5054a491161c5d
SHA512
6caae74099242130935d1647216c2f69e7e6ccc2d64ab66cb94e78de498597b4aa82d06d2a8f59f4c9b234914c8ddb739df04f704af7a4302b05f05604e7da42
SSDEEP
1536:mPO6KEVbsVP0g21kfNdliB8Vpvi8R6rlNm2GUqjU9DJyrgyE:cMEVbsVc1S7Xpvi8R6rm2ysFG3E
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
adbfd06ac232e970d30493bfcd7fddcc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ