Outt
Sett
Behavioral task
behavioral1
Sample
bd5db6261832b78d1d90735c1b8d8c37_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd5db6261832b78d1d90735c1b8d8c37_JaffaCakes118
Size
65KB
MD5
bd5db6261832b78d1d90735c1b8d8c37
SHA1
54546b23604f9d48f16d76256c848e55c44ba1b2
SHA256
960f771529ada9750ef54f7921d2e9b7bfaed9b1e4b3788fbc895f3305e4857e
SHA512
e634a00cd8d6346aa0fa32dad69c693e13155fe4ea3ca8d72d30e71bfeffe7bcc888c18057d9a3a1ccff3e002c711fc2b2a22bae9bdc53a2792ad9ada30ae61b
SSDEEP
1536:mPO6KEVbsVP0ghhfHABMmw3bTXzXeREXobzPE3Sw45aKmqF0sMw4mZ:cMEVbsVcCRDORgaPECw4QKdKeZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd5db6261832b78d1d90735c1b8d8c37_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ