Outt
Sett
Behavioral task
behavioral1
Sample
bba3ee28256d975786a04fc20395f6dd_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bba3ee28256d975786a04fc20395f6dd_JaffaCakes118
Size
80KB
MD5
bba3ee28256d975786a04fc20395f6dd
SHA1
621c82d22506ede886a36e586efe59b74a682ef7
SHA256
a58f12d5af99d790ccd9c8b2cfa1245ffc0dc75e14f33342ae103db6dcda5821
SHA512
1e251603b42c70ffa5668c76bb2869a729930af69754b0f2e6a6c254ce333f863836632caa2bf919483e48077a6cc3cdfb0a88f44fe78418bdac82c2736f2343
SSDEEP
1536:HKvv9jeCw6l9n+Eu22v3UlND5b+moz+FaSeYxVgqf2Gb3Umf:TSHu22vEwmogaSb/gqf2Gb3x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bba3ee28256d975786a04fc20395f6dd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ