Outt
Sett
Behavioral task
behavioral1
Sample
baf6b32a8bedd7164cbcdddbf7618d14_JaffaCakes118.dll
Resource
win7-20240708-en
Target
baf6b32a8bedd7164cbcdddbf7618d14_JaffaCakes118
Size
60KB
MD5
baf6b32a8bedd7164cbcdddbf7618d14
SHA1
c57e39c6c0e7f737b14554eb21e2dcf52391b568
SHA256
003c9afbc45e7a5e5bba0dd840ec3a6a455c0890911e4049482113b829ba793a
SHA512
8ca006b1f7aa8475ff1ce817e8403a81d8e9ec1fc86223f1d44a472771e38effff48d94f6aa659f4faa4e1ae14f192633e2ddaf1484b1b71efcce433cfbb904a
SSDEEP
1536:V8O9Nn6Rjrih+5ZsoIt7ZsREpZODaW9JwO7EWDXPWeI7Et1r1zHJw:2Oz6VWmsVsREvZO7EWLPWeIC1zu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
baf6b32a8bedd7164cbcdddbf7618d14_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ