Outt
Sett
Behavioral task
behavioral1
Sample
bd5471a6f6c8ff7c3ad5eb99d5810a73_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd5471a6f6c8ff7c3ad5eb99d5810a73_JaffaCakes118
Size
67KB
MD5
bd5471a6f6c8ff7c3ad5eb99d5810a73
SHA1
d0788a823adb533b01cf754e1a543fb26d1922b6
SHA256
7f18e31acbdb0d174494f69888a2fd69021675cbca4a959fbd460d28fe2c4bb0
SHA512
7ae7abc4578a57564575efc32e9fde591337d757b11bf23100c27f052eef4ffabf9e0ef373ff64f8e8b42d8ec622da7dc415f0a3fbfb78abe8c9ccf22a90f13a
SSDEEP
1536:EGS89h9kFS2M9NPWaMBZePhg4M8NTNXJUJt4Mbyju:EG79YlMXJBhg6NTNZUH4Mbyy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd5471a6f6c8ff7c3ad5eb99d5810a73_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ