Outt
Sett
Behavioral task
behavioral1
Sample
baa826b311ac8169b3435e2e1996386a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
baa826b311ac8169b3435e2e1996386a_JaffaCakes118
Size
64KB
MD5
baa826b311ac8169b3435e2e1996386a
SHA1
60524ddd06c2af0db88c0d4331567f6c5015c8e7
SHA256
dd1ac0d51a0a62c3e5d0c89f345e42c3a58639e5e79b5da284326e710590667b
SHA512
18c718ffd72cab317e2ac48d644dc2e3752547832fecd37ddf08e41d917aaf2e6aebe05fe3a707f79f4e5be5c108cc8e1c1a2ba08777072ae5da012a55f5ce74
SSDEEP
1536:4XkTnJx7i6nRUl3xxWwUg1v2p1wZE7zAVFNkdhoFx3:SKJxuzl7ogRAwC7evkdhK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
baa826b311ac8169b3435e2e1996386a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ