Outt
Sett
Behavioral task
behavioral1
Sample
bd42828700003c4a8829006adc19ca3f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd42828700003c4a8829006adc19ca3f_JaffaCakes118
Size
64KB
MD5
bd42828700003c4a8829006adc19ca3f
SHA1
9cebf416f81125f66b26bb9fda329880006328eb
SHA256
7a8eb8491a6e934cbcb698abb87e46838eebe15f4890618749538cbff85ad8a4
SHA512
5b3679c4465ef015e301abc30e64b1b40f6afe3b6f45672d4dd5d6e8488c6c68e3579f3c10278fad665dc6b6ca7c9ee5a70af6baf67f14f1bfce6c2e9cc0d12c
SSDEEP
768:GbvLDaaMact8TIF1anrNUUQ3FHMd1mA3u4p71s1mzOoEP4mZ7MaBXt:ev3CUIOdRF1sozOasMaBd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd42828700003c4a8829006adc19ca3f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ