Outt
Sett
Behavioral task
behavioral1
Sample
bd90b4254f0030fd1e6ace82dae387e8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd90b4254f0030fd1e6ace82dae387e8_JaffaCakes118
Size
65KB
MD5
bd90b4254f0030fd1e6ace82dae387e8
SHA1
f7869ae3be8fd3e741cf6e1c4100ff0ec66f66f9
SHA256
e39d6749218aae151842493c2ef1a4eafd76177a1c4f1071681c2fd91d777685
SHA512
28bd73b509a92cc1062d8d8b9b8816b2ed19d1ee6d51586de402fd9d22bcfb70711ee2ac5a7b9d930dcb723af7ba871241fc8679dbcd8f87ae071809b0b71935
SSDEEP
768:nbY4lZL/Pfj3AYKxs+HNruaq2Ggyl3Lh/YUDlYPuEKit2t/HPTSIyfVwJjqMaN5R:EGVrQYP+Hy2a9tmuEK7t23aJjqMaN8dw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd90b4254f0030fd1e6ace82dae387e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ