Outt
Sett
Behavioral task
behavioral1
Sample
b0c85260f111ec7d49c4bd26c925657c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b0c85260f111ec7d49c4bd26c925657c_JaffaCakes118
Size
73KB
MD5
b0c85260f111ec7d49c4bd26c925657c
SHA1
39c0d03184d96b24587ce451a9f3df9a34e7c573
SHA256
05f3a35b7ec945819c87aba49f4a2a54365da65ec68821282c73931a627dd72b
SHA512
8ae7c0c7e31230a5ba8799d390ef780f7ecacb772d4cff276e79432b3caf2cbf4c0593a4553aefb596dd90080e9f1c101ff1cf6b2aa15b4e3979f48089b12f22
SSDEEP
1536:4XkTnJx7SqnaUpaSipIWl0/5d46AKnsOzCqBl6EycGkApsdN:SKJxZ9sX0/5d4onsCk9zkhL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0c85260f111ec7d49c4bd26c925657c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ