Outt
Sett
Behavioral task
behavioral1
Sample
bad6b9030d82dc767c6580da52fce1be_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bad6b9030d82dc767c6580da52fce1be_JaffaCakes118
Size
64KB
MD5
bad6b9030d82dc767c6580da52fce1be
SHA1
ce9b3fb4059920f0ca30cf4c08d4503c39677286
SHA256
1dff16bc9e34cd33ddf9eb2b6bc4261dda318410d955742ae6c2e40b3b6cadaf
SHA512
a0e1f26d88bbe63dc2960b6bd3db63eb97604e3f34700e0a7166190e8002cb769c2d755d65842d3afb8799255071127b50bbd0da8efc585933728aa4f1167502
SSDEEP
1536:V8O9Nn6RjriUyEn5CT1BuWu9YQg4/D000z5B3KVIIEQB3:2Oz6VWhmC5BC9GJz6VBEQB3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bad6b9030d82dc767c6580da52fce1be_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ