Outt
Sett
Behavioral task
behavioral1
Sample
bd7ad923442d0391d3b52ce4ccc2d952_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd7ad923442d0391d3b52ce4ccc2d952_JaffaCakes118
Size
63KB
MD5
bd7ad923442d0391d3b52ce4ccc2d952
SHA1
33184d536166f11acb828fcc7f681e727ab2eff0
SHA256
e643b57fceb6d1ace0b7a0a02eefcd1f855ac942f61bc672f0f28e96fd442038
SHA512
b801b7c5f00fd78b07b03337ec818823193a705aae7a71b7b4d32d0abb44dd50819a8ac3099482717202f863d296b936c6b237d0c8663fcd4038642717f9a049
SSDEEP
1536:MhBRVgrExucMz9galgy7DTvZBP68hN+CqO8MD9C/HivZy:cRRspR1hNDbqHiM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd7ad923442d0391d3b52ce4ccc2d952_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ