Outt
Sett
Behavioral task
behavioral1
Sample
bdc3c6a35a9697325ad1f786a09ba3c2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bdc3c6a35a9697325ad1f786a09ba3c2_JaffaCakes118
Size
61KB
MD5
bdc3c6a35a9697325ad1f786a09ba3c2
SHA1
42610d261c2ee341a39ff09d32e2afec85db464a
SHA256
a4969bc1c77b83c362f53ce81495a15ddec7afcb0ff7b0e98f46619901bd5bbf
SHA512
78d026c5cf60d99a47d3b1b662880b0ee485546801405f42d366ae9f82d9c5c33fdc2157efd0f63aeedb9a87ff314c1647d1a84893219c2800c009650564ee1a
SSDEEP
1536:n7ZLNPp9pZBMqmIX+nBjIU+vj5Ee6bqSG8S8WY4:7Zpp57KBMUiae61JS8WY4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc3c6a35a9697325ad1f786a09ba3c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ