Outt
Sett
Behavioral task
behavioral1
Sample
bd3e082030512b5c2f7ec7f4f4cba3d1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd3e082030512b5c2f7ec7f4f4cba3d1_JaffaCakes118
Size
61KB
MD5
bd3e082030512b5c2f7ec7f4f4cba3d1
SHA1
29adda6d4502adfb993dce8783931d0e5fc380e9
SHA256
f5e3871bd8e8517bc6516c86647d46dbaa5786bf8318de4328a811bbe9bc5483
SHA512
ed3fa5f984519b610ddf15ad71e26315c325750d024f0c6594db03a61de1e44c50d4dc1a4f9d22d203c07255d41d40dce8ee113d00e5f3946eb534093ef9d978
SSDEEP
1536:MhBRVgrExucMyKWCDGE8DmtFoeqGxrHRNbFFHUCp0F4419otlrZ3:cRRsBWC1mmIeqQr/brHZuXHotVJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd3e082030512b5c2f7ec7f4f4cba3d1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ