Outt
Sett
Behavioral task
behavioral1
Sample
bb45c85a4c5f2f58162dce25190d0939_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bb45c85a4c5f2f58162dce25190d0939_JaffaCakes118
Size
70KB
MD5
bb45c85a4c5f2f58162dce25190d0939
SHA1
75b633209ec4fbb812e9060a43cc492f7f03e660
SHA256
2427801cce6c86f6d325ec20d4492fafbfceb26c3cb2ee56024886d8b650c40f
SHA512
15ac77e4d9061084c22f39284d89b72a31887d8d795e317b6f23219c176bbf62b7764034f06b27b04d37bc6b35d9ed1e15d9fd0f29043e93d548108bd8530656
SSDEEP
1536:e6PViKe7OdC1EJEjewRU03UBA2mYvn1bnehTvopYbqo:RViK+DEJEjewh3UW2ttbRpYz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb45c85a4c5f2f58162dce25190d0939_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ