Outt
Sett
Behavioral task
behavioral1
Sample
bd084f5d09aa7fcc9a3a4173034d9a78_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd084f5d09aa7fcc9a3a4173034d9a78_JaffaCakes118
Size
56KB
MD5
bd084f5d09aa7fcc9a3a4173034d9a78
SHA1
b8a75d06fc8178c23361f917bde870a4f1f24006
SHA256
f59ff1af49240c82845bea92e46fe5e22f7f5d43ce2d73e2513cf18e36058472
SHA512
9f1643a477c9205e44ec21349b4769f477a9c661586628737bde7357f461bbbbbeae0b883a16600aae02db5b133dc0a539cf703d1d3a5e60c5c3e4690080afea
SSDEEP
1536:yHZ5wBAHVmGDqeSaAWA5Nhumef7WsvJgPeL:yHNmi4aAWA5NnGbxmS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd084f5d09aa7fcc9a3a4173034d9a78_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ