Outt
Sett
Behavioral task
behavioral1
Sample
bda867365736fe1b419138a8ce25aee9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bda867365736fe1b419138a8ce25aee9_JaffaCakes118
Size
52KB
MD5
bda867365736fe1b419138a8ce25aee9
SHA1
33351d717b789e665f662703922c5ed570a776b3
SHA256
9421cfaf3e1cb1a39e30b9de87124d2860e14e6979beccd3b4ccfb13aea475c6
SHA512
871e938d9860a40bee7929378ad0d79fdab1bb959aa05ecef67bb608880357f68ebf52fb261473239111cc5f12a89b3dd929c427bb2518d9fa6defae23dde55c
SSDEEP
768:A6o6ZXtrAt9cjKkQ1RmBfRMHaRJ8h2qX6jr8xBYBjc6dbj9c0R9+tvyhM1XNLt/6:s65kur6UfRMHS8oH8AB4kJk6hMPWxx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bda867365736fe1b419138a8ce25aee9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ