Outt
Sett
Behavioral task
behavioral1
Sample
bd27f8656b7e22c00ccab729653f32f9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd27f8656b7e22c00ccab729653f32f9_JaffaCakes118
Size
63KB
MD5
bd27f8656b7e22c00ccab729653f32f9
SHA1
f12500b9e03e3cbf7f6ba654535d2776b9f76ad0
SHA256
91641e371f05561161611bb91fb8e99f618aad80e57abea64eadfa537f6671d2
SHA512
70e8f042202a6120c85313a1e8b55e138f10f08613935e8de6a5346d31119c92e99e5ced25f6d17b9893b7b83b8ba8e7ce2cbf465343edd6a92ae8e4000dd682
SSDEEP
768:nbY4lNA8GbvYK8cQk2p0kktwEo8zWSOeBcdeUwawnXn2L1Z/S/lbJgz5hVZJXpBa:EGNud0p0kuHcddw7UmlgFFZpm4NRG+Ny
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd27f8656b7e22c00ccab729653f32f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ