Outt
Sett
Behavioral task
behavioral1
Sample
bbd5d40ee4a750b556a97b256852b964_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bbd5d40ee4a750b556a97b256852b964_JaffaCakes118
Size
54KB
MD5
bbd5d40ee4a750b556a97b256852b964
SHA1
2787ec85edce225f7edcddfb3aaf17979c0ce947
SHA256
2f875f781e8a4b11212bd3982221083dfee5b1ac909c9fefef680f30105dd9f1
SHA512
c463446d1f55e4deef32c6535176b8b1d070e15a7067e510e5a507c22f61891ed72e688da6c59ca5ab00d24daf30ff991fed75c0e3d0a6cedb7aca8a9153422a
SSDEEP
768:h8WTpVT0X8zb+pdaG3C5MHR761/V4K1lqLnNkrEsdEGh0pr0ExN3jNrMdYq4PHYm:RVcdV35R+n4JNkJarxxNzNrMeq4gm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbd5d40ee4a750b556a97b256852b964_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ