Outt
Sett
Behavioral task
behavioral1
Sample
bae5df3dc5a5ab8483e77814edeaccad_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bae5df3dc5a5ab8483e77814edeaccad_JaffaCakes118
Size
48KB
MD5
bae5df3dc5a5ab8483e77814edeaccad
SHA1
d2ef8ead9820a7b61ba11d03d6ece1471bd99048
SHA256
7a6637bbf3a600b39fb27f107d7667b308731e0804cecdc600ea9fdec4ba96cb
SHA512
03c6795a515c6f9c84b542bb6fb8b1085db1100d32186606821124141da80069a6b2946b6b65af19a3959651476098fa6a85528267e5adcc5252005ab7e863f9
SSDEEP
768:nbY4lNoKcOA+G6GpR7m7cKrlFS7w+b2ayOvlR5oQ43DC1BP+1JEezs:EGNoxOAPlbKrm1b2aymHeJOBm1Jjs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bae5df3dc5a5ab8483e77814edeaccad_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ