Outt
Sett
Behavioral task
behavioral1
Sample
ba34c55ce6be3299d1487d5abe5c59f0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ba34c55ce6be3299d1487d5abe5c59f0_JaffaCakes118
Size
66KB
MD5
ba34c55ce6be3299d1487d5abe5c59f0
SHA1
53f7a84f95d5a15ba7b9c26e83e2a8c1eb411577
SHA256
280876381bcadb4303546b228a3810dbe0886dc5f92fbe1c1025b2477ecb7754
SHA512
1569e9f1eb9ddece0584d4f77598c968eed0b9187b3a4a9a3603c97b6905c50195a674c5f6f8f33fe219a2941379e81e50ac7192ca79e2cfa52af28d2c74e850
SSDEEP
1536:qmmMZqm2KKYV5hfolck49KZFGB8PXyDUXfCRYn:QMZqm2JUvfolDfZS8fyef
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba34c55ce6be3299d1487d5abe5c59f0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ