Outt
Sett
Behavioral task
behavioral1
Sample
bd925120faac171d8f45f746eb325fa3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd925120faac171d8f45f746eb325fa3_JaffaCakes118
Size
69KB
MD5
bd925120faac171d8f45f746eb325fa3
SHA1
858c8b4673f7ee97f72d9427f315acb21e24f446
SHA256
7c38cfc037e0f4ea1e5e22b19881a74ae64a72566b22e07a0501878baf0919da
SHA512
ad34feaf9a9c4de93695da78c8d66de1265abfbc6ea99a64467c8ace0499af17511c4fb86b36d870a4ec38365d3aeffe301191ca279befe0ea4c2a70944a400e
SSDEEP
1536:yHZ5ewc+maZysmBK/ykGJLhlDSO5ON+G8MDaBtM:yH2YysmBK/yBlDnEN8Tq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd925120faac171d8f45f746eb325fa3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ