Outt
Sett
Behavioral task
behavioral1
Sample
ba6107a24770731433ba73c1d6896b63_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ba6107a24770731433ba73c1d6896b63_JaffaCakes118
Size
81KB
MD5
ba6107a24770731433ba73c1d6896b63
SHA1
c31460f76c934e1a7e725dc1359d24ad5d28e564
SHA256
4cd59153b3bb671d922e3e6072d724267c556ed9bd3ed24f40a0d253af772197
SHA512
f2685061b92b25604ca8a137a49630488108b8e7385faff7a34244f0aceee3a062d34778fe3535b0d422df9e43e087609233510bdbaad0c789ece50c50bbd33a
SSDEEP
1536:kjRUUnF/6S0A3t5Ein99ZURn1jjNS/Nr39ho+eIIPU:kFLnF/0Ad5Es9SF+r3Xo++PU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba6107a24770731433ba73c1d6896b63_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ