Outt
Sett
Behavioral task
behavioral1
Sample
bd4015756a8c748b39038b51cb6b8ce5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd4015756a8c748b39038b51cb6b8ce5_JaffaCakes118
Size
65KB
MD5
bd4015756a8c748b39038b51cb6b8ce5
SHA1
e953f0d0563566be2b4c8a2cfce60a8d13791127
SHA256
f1f30d80eec2e0e5df41f8fde897fc1d8f7c4e82e2a667fc492d27cd7e8524b8
SHA512
a0f3eb855f55df20f5291e9a002b3620b48cbb3a14bba2d5de1e9476b3cabbd5d468e5589f31efdc7d680d57d2fb6d8e9d930f33136c1126ed7f9a8edf68a55b
SSDEEP
1536:9AiCCYCLhRk/B2pdmV1VaGRsPgVrsIpHhdQXiWd3:rh+EpdGgGnVrv9hdQ9d3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd4015756a8c748b39038b51cb6b8ce5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ