Outt
Sett
Behavioral task
behavioral1
Sample
bfae2b0c9de789a1198f135524c27360_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bfae2b0c9de789a1198f135524c27360_JaffaCakes118
Size
42KB
MD5
bfae2b0c9de789a1198f135524c27360
SHA1
2712778b8cb04614819bb7cf0c6a7249ea351e5f
SHA256
be8d1f07ee94e14deb2c9b350a1ab465e23807f78ceff3fd9ce6df93ce49e4c8
SHA512
eadc9e868f567fc542f80d5db2904de9cc2378719c4a1dd68f72b771a42c95bb806414a0c8a9db79beb42b5f54d903cfdfbe5310d79d66705269e1cc8026a76a
SSDEEP
768:A6o6ZXtrAt9cjKk85QOkZQ6bLKWeChjIfmSRU97AvrSgh31/kC6piPhjG:s65kurHO8bxUuAUJzKl/ktQP5G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfae2b0c9de789a1198f135524c27360_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ