Outt
Sett
Behavioral task
behavioral1
Sample
bd124f50af3774ea28051a12c21bb707_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bd124f50af3774ea28051a12c21bb707_JaffaCakes118
Size
44KB
MD5
bd124f50af3774ea28051a12c21bb707
SHA1
e7341e92b55cd0fc7e43ed0d540ad423ea4e5b01
SHA256
2f36189809a798c60d6d8fbdb3c2851c0958462110d87c709bea98beae5dbcae
SHA512
6e07c697bfefb5161b310b82bd0b98cfb784b3e0925c2f7a04c9d338c4d16e4cd5fd1f8bd7f9098cd0616df726bddb20540ffeb0a1dac20d775af1a4b9cc6a0a
SSDEEP
768:GbvLDaaMact8TcnZ1HC1XNAFCM+Vvh17QQRAOJSNRoowQCMCkzUR9u0h74BGz:evU8JMKh1F08zMCkgqS4wz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd124f50af3774ea28051a12c21bb707_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ