Outt
Sett
Behavioral task
behavioral1
Sample
bd39f8b6bd95f1bacb794490ff7df243_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd39f8b6bd95f1bacb794490ff7df243_JaffaCakes118
Size
55KB
MD5
bd39f8b6bd95f1bacb794490ff7df243
SHA1
1a0b2f337ccb11f3d790b50db3059933d883d89a
SHA256
85134b916e2cb868f1d148f2d823fd068e3c54fbca669f4234a5f0cdc56d7ff6
SHA512
cfec269d094d54bd3e6c60c6f5f37a40e3881323e45a112ddec08e28cde7f0251515f671c75c5ed92247158b9161d18ad768b7858a0b2fab7db4209506a4aa82
SSDEEP
1536:n7ZLNPp9pZBMeEfdo/pOMD2iHtXac/+L7SHYdL5:7ZppbEfdonD3HZz/WpT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd39f8b6bd95f1bacb794490ff7df243_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ