Outt
Sett
Behavioral task
behavioral1
Sample
bb3582f11bbab87690163822d534cf41_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bb3582f11bbab87690163822d534cf41_JaffaCakes118
Size
62KB
MD5
bb3582f11bbab87690163822d534cf41
SHA1
366490cf2738f4fb53c871a340b5137a78e61ff7
SHA256
7f6667651eeadd96da3a733035254f9095d2e7b6e4dc4588191b719e5832e99e
SHA512
8d4fd6169e6400a34f36180872d3b97401f5942a98f637bba9b7fe37bb1aff558a4343e96520cac84f96bcd0e9e28da30fc3afe2b4d0301033043b5f494c5941
SSDEEP
1536:x5k/Jn5bK6YUnIFM2vYumFtjplDfJ0Z1YDxKdcWmqQTALbPU:x5k/d5bKTUsFJStjpJmSxkcWmqrLQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb3582f11bbab87690163822d534cf41_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ