Outt
Sett
Behavioral task
behavioral1
Sample
bd9cb991ac821ea4b3120c7ec4cd6586_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd9cb991ac821ea4b3120c7ec4cd6586_JaffaCakes118
Size
85KB
MD5
bd9cb991ac821ea4b3120c7ec4cd6586
SHA1
3df5a8eec200ee1a0d2f16bc2340fe3174fcbff2
SHA256
901d92a773f068df5b3689d8a0be98be1e3e45595c72b3d274b1de02b18fb9c2
SHA512
95bb37248e50108e2bf507c9b5910b1fcb5817686514e6d33ac8ff3ae3ac5af76672cdca0da39859d48356926f8e2122d27ac4af8f5285f9ed71c609fe00e0b5
SSDEEP
1536:2hq93dXkkjBLtksZ6Kz9Z+ecloZ8EgevU2nJf0Ct+rfrQ5q2Y:z3koBr9Zp4JEFvpgrQE7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd9cb991ac821ea4b3120c7ec4cd6586_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ