Outt
Sett
Behavioral task
behavioral1
Sample
bb47e9711759ad2fbfb84bcf19ba0a7b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bb47e9711759ad2fbfb84bcf19ba0a7b_JaffaCakes118
Size
62KB
MD5
bb47e9711759ad2fbfb84bcf19ba0a7b
SHA1
00d7626b79d8e311c0d83e62be0ac7aee9e42f28
SHA256
8c1986636416658ada53692f1013ce2f6b580480cfcbb63ea8acd2946320f785
SHA512
0dd5bfd0a9b2bab2aa0c6030fff67bfd0dbf6002175e77b736bf67520b3b8db509837e486762393b7a5ae8c511b0f83c9fcc10a461ab24798203bc526947bb5f
SSDEEP
1536:EGYzCUbbzk4vF5uIgfN5Zo3isZLb989CU:EGfUjk4vng7c1Zns
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb47e9711759ad2fbfb84bcf19ba0a7b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ