Outt
Sett
Behavioral task
behavioral1
Sample
bb9342fa5f4cbb5eb8edfc0396d7db3d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bb9342fa5f4cbb5eb8edfc0396d7db3d_JaffaCakes118
Size
49KB
MD5
bb9342fa5f4cbb5eb8edfc0396d7db3d
SHA1
c9815a722010f5ed7672fc79bff98b78e0bdebaa
SHA256
2ce1684161a7ff14915bfe95c66678cdce49a7554575e8b59346b69e45168a62
SHA512
e92ca2b2770dffd49212619fdf7216da9109fde74075aae26a9894151dd2f6e1323050410b9d91f0ccfe2c4a6e3f965dc21e3c37bc26a3f13ea925d6d37cc005
SSDEEP
768:szM2xVVeiMNC1DEIxT4WkgdyyW0QzN433fFnuXz6KqUW44gyrqX1g7uxYVD+:V2bfdkgdxWBzN63xYzjq3EgqXGPVy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb9342fa5f4cbb5eb8edfc0396d7db3d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ