Outt
Sett
Behavioral task
behavioral1
Sample
bd5a062e9d3d1f38f4e2b7465a091fc2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd5a062e9d3d1f38f4e2b7465a091fc2_JaffaCakes118
Size
50KB
MD5
bd5a062e9d3d1f38f4e2b7465a091fc2
SHA1
ca3c6ebaa33e2a165cfaa3fdbb22eb143f7b24f7
SHA256
b8b7e4df850e5ef691277f7b7ecbd4ac9191eb0f967d56e9cc9576c94484d114
SHA512
6f5944b55f82724f1e1c2e7b189864d9a26ff0d13f909b1c83d97de6e42aa7656da7ef20aeb28f22a28608d9db1b9ef7ef94ece5cacc57c37abd9c551cee9717
SSDEEP
768:z3OHS8KOzgFgyzbaHgtlDq11FZcbXreyhP2tfKDaQ8zGIn885moxASqpcbLdWaqY:yHZMdvqeSeog8znn8l0ldW3Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd5a062e9d3d1f38f4e2b7465a091fc2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ