Outt
Sett
Behavioral task
behavioral1
Sample
ba97f645d0b5d42f95205f10f00b0c74_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ba97f645d0b5d42f95205f10f00b0c74_JaffaCakes118
Size
76KB
MD5
ba97f645d0b5d42f95205f10f00b0c74
SHA1
d6231db62d712f9fca0263ed8fb0b09155003a53
SHA256
6a870b384d13ac47fdf358f2f90f0aa540a6eabc40268fbbac51f24fcc736af7
SHA512
61c58f2ac3e4c5a8cc98857c75df9c97724fc404d996b1a0bd8b3bd2e7db066164f344b8098ad547151a767f51bb5000acc03b0caa2ebfb4d266a7c4ced7f3cd
SSDEEP
1536:agF0eiyUcbIurSxZQbQ+J2vQfAKPCo7Qh+MDMtCrxSq:t2yF889fJ2bKKo7Qh+M4bq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba97f645d0b5d42f95205f10f00b0c74_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ