Outt
Sett
Behavioral task
behavioral1
Sample
bb8eacc5d8cbeb197da8fe468b421e34_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb8eacc5d8cbeb197da8fe468b421e34_JaffaCakes118
Size
65KB
MD5
bb8eacc5d8cbeb197da8fe468b421e34
SHA1
9b204c7f3144c62e81219721f74e91898648b0f3
SHA256
0a08e2eff0ed3aaae69d4d9625dfecd2f5c364b8ab9c94b365b0f17095712d16
SHA512
a387198f86a9c08da3af67f468c300df941234a501bd90b1781cc84994b718101f0be11d2fd943920458a96f7185f52bac8d4feddf77bd160950cacf22e6620f
SSDEEP
1536:GQ3tfgXKVqQQ49p3Mg89vNUq0Zb8eX930pfJj/u15U+WtdiNBN7:VfgXKVDQ4T3WVMHXl0fI1548N7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb8eacc5d8cbeb197da8fe468b421e34_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ