Outt
Sett
Behavioral task
behavioral1
Sample
bd1adc7f5a996b4d131fb0fc412f76c3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bd1adc7f5a996b4d131fb0fc412f76c3_JaffaCakes118
Size
46KB
MD5
bd1adc7f5a996b4d131fb0fc412f76c3
SHA1
acf8bb548a2a748386267a2ebd5b58f255a78df2
SHA256
f190ac4acd66187374dfa2c5ae389d523de0749162d9164ba45698e78db430b0
SHA512
b591ea2c2b709c914f8d84e9af3abb564182ba47ebafca942be78be8cbc98a9e63d34620fa387318265c212a644534b7dc2dfc34abd6476476449e70024a83b4
SSDEEP
768:z3OHS8KOzT598C/yOWvknQmUDYd5VyL2U7Dpt233wKRFJoR1KWdeMCd49WwGyH5L:yHZf38C/5mEQrDoVy9ptehRFGR1heMCu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd1adc7f5a996b4d131fb0fc412f76c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ