Outt
Sett
Behavioral task
behavioral1
Sample
bada6f5576aeb7b73f29dd484bc1e2ae_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bada6f5576aeb7b73f29dd484bc1e2ae_JaffaCakes118
Size
59KB
MD5
bada6f5576aeb7b73f29dd484bc1e2ae
SHA1
846d78f088c61c86a4c38d9c69031acb1716613f
SHA256
2ada4619be9842a532e443dd5830be3d37d4fe392d76f29e83ccb19fe340d7cd
SHA512
a789e64436d9f28f96e5a481d41919398458444026ea87ab084599d59dbcc270b190409ab21935343ef3613bed219e3065c6cda24fcd610b8733ce305c470034
SSDEEP
1536:RVFC9jA33Y7IacfK2haprP3LdzmSGWobo:Tc6fl+prvL0i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bada6f5576aeb7b73f29dd484bc1e2ae_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ