Outt
Sett
Behavioral task
behavioral1
Sample
bd2a2826c2a9e6fe2e845b164e22ce6c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd2a2826c2a9e6fe2e845b164e22ce6c_JaffaCakes118
Size
69KB
MD5
bd2a2826c2a9e6fe2e845b164e22ce6c
SHA1
6854ae32aeba992549164727ca830a6e51751c02
SHA256
1f66b14347f577f4d2b82ad3da67cb2ea16cbd4bec0f07419d6e7d8156f19faa
SHA512
b4d18009286b251dafa94504a65fc19026b04dd103f056b57b8db724836aa2a444901a303e1343a51672103c0149d531535767f65c2aaa899598f30533676626
SSDEEP
1536:yl3E0T4kGbxcojYzsRxUvwU1jaKam9laNbalf8:E39XGtcO2mxUv11Ram90NbuE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd2a2826c2a9e6fe2e845b164e22ce6c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ