Outt
Sett
Behavioral task
behavioral1
Sample
bd21b204f81ad91b1f6540e6e0ff969c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd21b204f81ad91b1f6540e6e0ff969c_JaffaCakes118
Size
66KB
MD5
bd21b204f81ad91b1f6540e6e0ff969c
SHA1
54ec9ae6437bd2766c3e0c58514dbd5d7868ca2c
SHA256
074d61ea62e632f7a14504368ce6b77aa558f31d7e7b5563888bc14a467d9bc3
SHA512
efdcecf24d196d14bdb5195d7df5dd1cc759553ce20910f0a485e88c7d14a6582d156fee64c4501e84f1d1969ab6af328a50cee010a9b1c4a00d66b5b7d87d08
SSDEEP
1536:Bm1NGJVGggUfG1wVFvZDbil+XZZ/JD9h9prvdWOG:kX0VSUu1wV1AlgZ/JDv9pvAF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd21b204f81ad91b1f6540e6e0ff969c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ