Outt
Sett
Behavioral task
behavioral1
Sample
bae1b194961fcd347aa92cda080d6d81_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bae1b194961fcd347aa92cda080d6d81_JaffaCakes118
Size
54KB
MD5
bae1b194961fcd347aa92cda080d6d81
SHA1
891b1233e13180fbd6e8c08a988aa062ae8e0bb4
SHA256
7bd6d978a81472422d18c75f3ada88557c789fcae27ab3097f06c00730ee0cb2
SHA512
c6391e03f5ea12bdc58b86d712a416c1bdfc4d2e11f52e26a644552c3dab9db72a452f270173648dc9027e01a144fdd3afa90cd8c8b85d3d35e54a977cddd823
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTAw3W/Fu3Cc7HRTUaUm6yovzQhsdsTfnXetKLkAit6:mPO6KEVbsVP0gHFSaevzwTfnAAGRM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bae1b194961fcd347aa92cda080d6d81_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ