Outt
Sett
Behavioral task
behavioral1
Sample
bb493ef5d426521b2259ed71160213eb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bb493ef5d426521b2259ed71160213eb_JaffaCakes118
Size
55KB
MD5
bb493ef5d426521b2259ed71160213eb
SHA1
d7efaae2f9b0a2dee0d00410b78f500f1478ea96
SHA256
42e90e68da5ae0c55c3ba4b8720d2cd53f232ea4227a3b1f72f8af4310b95801
SHA512
a8369f77d8938cab9f8c834bc078ff503854163283763e9b94d08b84f5c9ee529a9e2bfbd278b8f80ffdd7ae80ff1efff8c05f34ea9f531c92a35219fa6ad811
SSDEEP
768:qz6nzm1b5gNZLLrfLg4SgQnrv3him8FvwCAPYBaGvpXZy6P4B2WOuanen0jFgcMb:qmmMLzSgQrZKwCAw4kZhPPWmLFA7tx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb493ef5d426521b2259ed71160213eb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ