Outt
Sett
Behavioral task
behavioral1
Sample
bd492103b09b21428364dc310c0d6dbd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd492103b09b21428364dc310c0d6dbd_JaffaCakes118
Size
64KB
MD5
bd492103b09b21428364dc310c0d6dbd
SHA1
363269d5b286b1a29ad278d6cdccc9ed0f2fc74f
SHA256
8e18151622d0587420fc2b3f4378cd0679bbabfcc770ef4b78e5d7f28921ceb5
SHA512
5a3e610a35b1b903d7c097563090a75b3742a028234d67dc9a3c588289a33ba4a8e4e52e748a8648d9a55a07343b5d8f9ef87d56d6c1448f107669d7517a3cc0
SSDEEP
768:M2tWGdRJy5JSdJPy6cZXRDzpGAmAXSs7mkkr/wVLJTZR34gdCBOfG4w/iaWRVY+g:Mq/JmJSPKvvmAXHmhjKL5ZFPm/gRVNg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd492103b09b21428364dc310c0d6dbd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ