Outt
Sett
Behavioral task
behavioral1
Sample
ba718fc5d8344796f90947532d8cf192_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ba718fc5d8344796f90947532d8cf192_JaffaCakes118
Size
38KB
MD5
ba718fc5d8344796f90947532d8cf192
SHA1
e4c5ac25cb2126413ab2a391f8e6a88815b07d0a
SHA256
4a9a16f64e3118ad64162d01ee089eb9a5f10ef362ec41356eb487fae0ac367f
SHA512
dae822101ea921dfb0a10b537b081b09404cb9ed68c4942a80405752df87e73078bad097b5c8ac8a827dbaddd3842eccf12f9f08a632581cca42ffbf7a173b95
SSDEEP
768:GbvLDaaMact8TWPwpYyKewGrxUcrwThbizWtvgYqQWcq:evQsK9GrxUuwTFWWtvhWN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba718fc5d8344796f90947532d8cf192_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ