Outt
Sett
Behavioral task
behavioral1
Sample
bb7ff4aa65243a851d0a1f3b94ad39cf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bb7ff4aa65243a851d0a1f3b94ad39cf_JaffaCakes118
Size
41KB
MD5
bb7ff4aa65243a851d0a1f3b94ad39cf
SHA1
fba108971239fcc3d09ce530a9be444379969f84
SHA256
3a79f3adbd22e15c257c32d5beadaecda9c4246067e3121d649ea11453d5b3b6
SHA512
f47c0c2737ce71d41404d8841619553ecbd3455b868f0257057757802ac02ae0919faf5efe8dd16650e2c39834464e2b0a39967f197a509ad996d704ab9993e5
SSDEEP
768:h8WTpVT0X8zbqaCPR249JUHXhEwb33kVrLc4bbj:RVC55okVrpbj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb7ff4aa65243a851d0a1f3b94ad39cf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ