Outt
Sett
Behavioral task
behavioral1
Sample
bdc661cded61fce426141f78ce2a4238_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdc661cded61fce426141f78ce2a4238_JaffaCakes118
Size
82KB
MD5
bdc661cded61fce426141f78ce2a4238
SHA1
13ec6028dd041226d79ccd9851db6dd17f854327
SHA256
76720db17e09339d28210ab29934c07994d6525d85fd01d4d596941239b68a21
SHA512
0b37fe7a098c4639e1d34c0be5c09ffd305a9721d1988a3a25eeb890a7d1f14ac80a619d8f9153b425aec7a27a799731d9a8f42a8af55fad213479183b1e41a9
SSDEEP
1536:n7ZLNPp9pZBMWkkzU7bIMgB2e2UYaWbwFsn1g9aie6QI1+HbR+SP:7ZppGkzCbI52IWbHnmYGQIoHbM8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc661cded61fce426141f78ce2a4238_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ