Outt
Sett
Behavioral task
behavioral1
Sample
bbc9868e7fd79221718f2f38b09f56d0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bbc9868e7fd79221718f2f38b09f56d0_JaffaCakes118
Size
66KB
MD5
bbc9868e7fd79221718f2f38b09f56d0
SHA1
7cfbb78b5db58baf0810fdd4c4ec47933277942b
SHA256
026e755848ccb00877fe14f4cd1e0e7fd3878a1d6d8fd15adfa20797d44d3e8d
SHA512
74a5dc26d40e6c9eb091e894f8913cf945f64befc235718f1341ec96021a8dbc74486800205a4e75125b77eb03f5b5a943fbb9863a48ece10376d7c36cf74318
SSDEEP
1536:kQfr0nHywquBgK4hZq1vKH9sZX1uWJUGmPz8D1gdOoFQcP:kQfQH/aKMZqVKHyZX1uWJvmz8D1gycP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbc9868e7fd79221718f2f38b09f56d0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ