Outt
Sett
Behavioral task
behavioral1
Sample
bd81cd64fe7a4ccf32e613820fa1da88_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd81cd64fe7a4ccf32e613820fa1da88_JaffaCakes118
Size
61KB
MD5
bd81cd64fe7a4ccf32e613820fa1da88
SHA1
534c3557c205b730e2b538e77513f5bee177e98a
SHA256
ce96c78a9a0798afc13e76c2112a5b58c14550b8ef367e7d6af582dd7cf59e99
SHA512
6493e4515d470a0443346a9ab0986a95a2c4a7337a7cb51c1cf2ae13c454c36bb9bd096bd1433d813153abb8226bf43eaef2a739d8c56746aa7ee8ac94dedc7a
SSDEEP
1536:n7ZLNPp9pZBMZlUiDJksKIqDPuqD3DvauacU9K7gjef1TL4UG/CJ:7ZppklMIqKmvauCUHdv4UGS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd81cd64fe7a4ccf32e613820fa1da88_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ