Outt
Sett
Behavioral task
behavioral1
Sample
bda6a4fe9cf2eeed56c0a8334493b06e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bda6a4fe9cf2eeed56c0a8334493b06e_JaffaCakes118
Size
51KB
MD5
bda6a4fe9cf2eeed56c0a8334493b06e
SHA1
a766f66e52945fba4ce6d5aecd04f7162ab57a15
SHA256
c1e3614d94580ad7cb93b24d4f609a4691b8768d9e5c0b64015cb15a2252a06f
SHA512
b8bbc5415e25cf065c9c68d9ab02e727a2d72df6db8bd5d683efa2b539881884ac4d44cb2cfeaa3d7122e053cc0e1c8bd337488fb9fe171e2cc382b05f71e3e2
SSDEEP
1536:n7ZLNPp9pZBMSCDSDnZ5aPfIOFLO+/BGlinuLQq2MS:7Zpp6inSj6+/8ltsxMS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bda6a4fe9cf2eeed56c0a8334493b06e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ