Outt
Sett
Behavioral task
behavioral1
Sample
bd3b9e0c06f870f5c9383b30d15e0ecc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd3b9e0c06f870f5c9383b30d15e0ecc_JaffaCakes118
Size
71KB
MD5
bd3b9e0c06f870f5c9383b30d15e0ecc
SHA1
393c4767f8a156ece70f28262add4d7d912ccf8f
SHA256
9392276b238a1792e6f45a28d0cc4a1ef522084e852816504a7be3403032edce
SHA512
f907e270c491bbb9216798921657ae65e1195904d03a592004e46ad4c31a6f73f1bd068688945ef390941d3b3bca6171ea9cab394f0a645b094a55b5f2a09383
SSDEEP
1536:soa1lMWipdGJCKE7qik62wP3rggfOzLFcIHUa8shQvd4y:SMWipdWENnTRfiaEjPhQp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd3b9e0c06f870f5c9383b30d15e0ecc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ