Outt
Sett
Behavioral task
behavioral1
Sample
bb8f50fbc9b43fac529f29878d4e646c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bb8f50fbc9b43fac529f29878d4e646c_JaffaCakes118
Size
65KB
MD5
bb8f50fbc9b43fac529f29878d4e646c
SHA1
f74ac54e9cc29bb075385aa95a58c4f7cf7e08ff
SHA256
a8b48a956f0890318ef12cd2d2fd7e53f9bca28d6f33de635238811a6051f665
SHA512
09aff4554e90cbddc1cfad723fae638cb9ef8649312e06977f35bfa262d196594bba545c93c0438a7c2641a7abb50695220d718cdc974ad995b6a4c9a7c744ba
SSDEEP
1536:yl3E0T//IzREIoMU7plOGZ8uJ6gyeB2mglBDSxM:E39T/AG5DOG2q6gyq2maBexM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb8f50fbc9b43fac529f29878d4e646c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ