Outt
Sett
Behavioral task
behavioral1
Sample
bd051636080a86f1f036764e354758a9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd051636080a86f1f036764e354758a9_JaffaCakes118
Size
75KB
MD5
bd051636080a86f1f036764e354758a9
SHA1
b3eec9ed9fda051a3086349cdc64d5990f916e3a
SHA256
176e5fe58d4683db1cf4b118246984c28c65d45cf5716e503c3741d5e9bdece1
SHA512
a69cbd29bdab65e2f72654f8c5b1928f13c6ad8ae045147f263425702409534a8d081f618421019b481c0c2ff3bf38715c5f905b6d72b5a49d8f28ca873235d9
SSDEEP
1536:1zExMwCGQ2jhH5bK8WaI1w/Aha5mfM9R4V50rgurbvCsH3Pwlwma0el:1I+wCGvNmw/8a5MuWgrDt4liTl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd051636080a86f1f036764e354758a9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ