Outt
Sett
Behavioral task
behavioral1
Sample
bd4491d0fb797bd26f63491d38622b24_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd4491d0fb797bd26f63491d38622b24_JaffaCakes118
Size
65KB
MD5
bd4491d0fb797bd26f63491d38622b24
SHA1
2df1efa94d77b07f2313d2bf531f111223f2836f
SHA256
69553c77c179ce335780850f2d2a8db8e01e688bcddfe966f928be470b2c9518
SHA512
36d9f56bbe1356b2de6bc22a3b4f81beb620f5820b4ab4dbaf9f7f44bcf41918220916df72fbe54e8f944114144bb30d0cf8d521fc794ec4584955c508eb4eba
SSDEEP
1536:qmmM12m92OOPaRt3nZONAeOIDgmZJ2fqtBs4PHzsbm:QMom9IiRdL1oJ2cKwzs6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd4491d0fb797bd26f63491d38622b24_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ