Outt
Sett
Behavioral task
behavioral1
Sample
bd460ca47f9a3e691d00a5ed97ccf158_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bd460ca47f9a3e691d00a5ed97ccf158_JaffaCakes118
Size
50KB
MD5
bd460ca47f9a3e691d00a5ed97ccf158
SHA1
93fa4b588d37f1c0bbafa4f39d2b4a906897be68
SHA256
9284c53136b0bdc41146d1f1729f1d147cddbc53af9a4ae711f48373882cac95
SHA512
86d7a1955bea0c18a4af9c038307b9171de814bebb60be495c0603a2ccb9749ed3563daab67c92bdd57fcaebb278fdff55049e5ed6e42198b9ff10fe7746063e
SSDEEP
768:GbvLDaaMact8TtfI/dHr7CEQXCmVLhXDrxJXFvDMRcvDKdHSb/AdLctUMZKKrAAv:evZfkdHr1QHFtJVgWDKFTx+Tq2qk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd460ca47f9a3e691d00a5ed97ccf158_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ