Outt
Sett
Behavioral task
behavioral1
Sample
bd4f7cefd974fa93b9d8d4745c3cc43e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd4f7cefd974fa93b9d8d4745c3cc43e_JaffaCakes118
Size
65KB
MD5
bd4f7cefd974fa93b9d8d4745c3cc43e
SHA1
7b59c59ef84d49382b51abd9e81015f4a0b8b569
SHA256
f8c4cd309c97a2d296d191d1ff4a58b3e9143e8f2003fa840af83321b8cf09c7
SHA512
81337b83bdadf2f2d95e54b71b1594016dfec11d43e962efeb9df60c8235b528182a8bb2958fb97b384bb8883160f988698afec49aa2e90bc59538da4d576ee2
SSDEEP
1536:yl3E0T6vg76+aX77IUEnyH505PhIPF9vo+BOD6gcf9:E39Wg76tX77VEmO5Z43Xgs9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd4f7cefd974fa93b9d8d4745c3cc43e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ