Outt
Sett
Behavioral task
behavioral1
Sample
bd5e19e11201b7f58f2515b8e47fddb4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd5e19e11201b7f58f2515b8e47fddb4_JaffaCakes118
Size
72KB
MD5
bd5e19e11201b7f58f2515b8e47fddb4
SHA1
3cb202fb3ff4100fbcb133ddd7f6e426614200b9
SHA256
bcec0624b8acab903c22bca5599e69d89ca59fc7325286704eb523d44cf47c70
SHA512
a25b8cc95dbd9337cce89080325d4977a39a1f41a4e29a71f8f596cbbc1ba52d0a626848c41826a058dbf1a3068bc168008d1dca6716a1a6743886a1e4d5ac87
SSDEEP
1536:EGXQdTd0Civ6AOJAz7TBTg0oDwIIkEw5GE7ORAMW:EGgdTd0CK6sTBTomwH6RAMW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd5e19e11201b7f58f2515b8e47fddb4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ