Outt
Sett
Behavioral task
behavioral1
Sample
bd79e4d0919402e1336036d95a2d9997_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd79e4d0919402e1336036d95a2d9997_JaffaCakes118
Size
69KB
MD5
bd79e4d0919402e1336036d95a2d9997
SHA1
774e852c2831e69279754bc26808414920521478
SHA256
9776f4ecb1dc42b10cd0c0fd7f8871fd0dfe193a34e67c36bd4c371487ca795e
SHA512
24efcf6147a0bbbcfab5f97add7658e00bb9d49adf4b1b8732ac1c63fd6bd046067275dcf50983a89592cb3cb374da996b48e8230f833a513312bb88cbe3560b
SSDEEP
1536:Bm1NGJVG50zdGJyBd2/zT+7LBiQu1Tg3m6fXXTQDc3:kX0VNBGEBw7T+HBi/tckDc3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd79e4d0919402e1336036d95a2d9997_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ