Outt
Sett
Behavioral task
behavioral1
Sample
bda20c7db1be64a4b83b0f95c30786c8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bda20c7db1be64a4b83b0f95c30786c8_JaffaCakes118
Size
60KB
MD5
bda20c7db1be64a4b83b0f95c30786c8
SHA1
bce364dbfb128f547a33279a42eeeadab0983435
SHA256
aa5551f6623782006553a1184b6445d79826a2fc4145b11da2fa03f8ace63205
SHA512
fafc3a151de5f83f1c5ad8c683c06de8c9a5a16992dcf230a419d7593d391adb0f9b8dd50f3f5d2d50f1fbd537b58ab33fe0c71b4343ae0cc8d84689c82fd19a
SSDEEP
1536:yl3E0T94C+uyzc9YCeZrS+Ly4og/q8p3Vw:E39uCUY9YC8rNL5/q8bw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bda20c7db1be64a4b83b0f95c30786c8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ