Outt
Sett
Behavioral task
behavioral1
Sample
bd230b9e58136bdd110bdeb3abe75dcd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd230b9e58136bdd110bdeb3abe75dcd_JaffaCakes118
Size
57KB
MD5
bd230b9e58136bdd110bdeb3abe75dcd
SHA1
4abc2d507c50d38261343146324173bc600e9854
SHA256
853424f89743f3416ce70c1f73077f7474ecbeff0b70287687fa75615054345f
SHA512
3859db30956b19709c49ae58d47a0b76c0082a727845db4e43ea9b9733ca04774dbaabcc4de41c688e7de8773d79438888f17700d10b3c8b46bf981b1c36ae62
SSDEEP
768:z3OHS8KOz4kNg0R7UJrRCBfPPcqAVUe/kgnUmOI95esxoZaoXMJcDGoaJcz5tW2R:yHZEu4NCB3EqQb/kCUmOE5Mg/OdtwUJb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd230b9e58136bdd110bdeb3abe75dcd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ