Outt
Sett
Behavioral task
behavioral1
Sample
bfb0c2868f10bdc2a1491a84582517c2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bfb0c2868f10bdc2a1491a84582517c2_JaffaCakes118
Size
55KB
MD5
bfb0c2868f10bdc2a1491a84582517c2
SHA1
a9460a1de077550016cfbb5667d1cb2f439d1309
SHA256
9cd97a1a2a1d8de793b366aedca0fa91e20cb79c7b1c6142bcc0262f7df2133d
SHA512
5db6db0596a8dce5c8f10970847cc69cf281b090f251e6658c92fb6fd1d326e396e0f0cc3e3651f33ea646e09e0e19142b9ba7733f8565b31ef5d38bee4a2482
SSDEEP
1536:GQ3tfgXKkL8KOXZCSyiyXigWn6n59IzB/FWSXrQKA93:VfgXKkL8lZXMXN597kkd1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfb0c2868f10bdc2a1491a84582517c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ