Outt
Sett
Behavioral task
behavioral1
Sample
ba697c373f237b9aa26a6e386a93a512_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ba697c373f237b9aa26a6e386a93a512_JaffaCakes118
Size
48KB
MD5
ba697c373f237b9aa26a6e386a93a512
SHA1
345c4239fb2f5c7582d3d1e3884112e7dac83ff9
SHA256
45aeb3661b5c5a09c2f45bda3d866cb64426de17a987bfd1a4c53abe425a037b
SHA512
268663b22758d831692b655c847176d3ecd5af6a78c5cd6a9c634d70ffa3e074d9b0796477e201a63d15df8177dc0ceab28876cebfb700c3d24de63d596ab35a
SSDEEP
768:nbY4l1LQGurlsm9AGOs/lH24LPyBIxCOmWL8ovfaW1:EGdBFaA/s/lW4LPyOLmW3D1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba697c373f237b9aa26a6e386a93a512_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ