Outt
Sett
Behavioral task
behavioral1
Sample
bf73b446ee45542dabdc794a0dc404d0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf73b446ee45542dabdc794a0dc404d0_JaffaCakes118
Size
73KB
MD5
bf73b446ee45542dabdc794a0dc404d0
SHA1
596c77065d6058aa53c7d19b11205067fd86a6cb
SHA256
6645c6c3c7f548d18dc5a07f922f397fdf64bcc91d289bb7247bcf1905a99bb9
SHA512
2ff0df1c955ea7555aeba44fb66562260f230c84f894ec43dabbd4917cd10e5968fe160d52ed833d8c383e7572175d24bd3d37a7cdf94184eb34c3942b9ee037
SSDEEP
1536:EGKiljE/4CgKVLHOaKqHc0uwVkuwU7HJy+4By7oao14D:EGrjE/PVbORdPU7JyvMMao1I
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf73b446ee45542dabdc794a0dc404d0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ