Outt
Sett
Behavioral task
behavioral1
Sample
bd683ca5f7e159394c427b01397ae0eb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd683ca5f7e159394c427b01397ae0eb_JaffaCakes118
Size
57KB
MD5
bd683ca5f7e159394c427b01397ae0eb
SHA1
ea9201ff4ef4179e86ef6d98c7db77229750fc25
SHA256
773ea4f234c2d6774c5882e2f9d9032c71c4671a5a6a9f855ca3c30e827b8689
SHA512
554a7439fb644ce6a621691ec338e1312c2a63f913357577d258cbfa65979700a96a684b0875cdbbec080b9af609423d4c7e6f0e39b10224166290679bf8c194
SSDEEP
768:9xBtKtqyLUxKwLGXWu5L8GpMmjFU8Gsa1GF4YUEI7IaoUA1G1i3K6rrrzK+ttP5Z:9jRcUmhpMBbNsa9krW+ttP7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd683ca5f7e159394c427b01397ae0eb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ