Outt
Sett
Behavioral task
behavioral1
Sample
bdb54a3c978287db4520bc8ed5da651c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdb54a3c978287db4520bc8ed5da651c_JaffaCakes118
Size
60KB
MD5
bdb54a3c978287db4520bc8ed5da651c
SHA1
dcc108438f14ebb387213ac79705b4e8abbd7fbe
SHA256
c90f6c4ea9826be425ff9b6949ec5c8b3068264e32b9325740ae6964fbd94920
SHA512
472b53f3b19989113cb5613c043b51d6172fbb6b8fcd0104f72f0f7e18208ff25e3dfe50d0cabd105ef0aa55872f2f5a12161ad610917bde8a772a8ce7f6ef6f
SSDEEP
1536:Y7BstH7sbCvE6OxTiak0lofnk3oQn97zHkxGFB:wBG7sevixY2ow3F
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdb54a3c978287db4520bc8ed5da651c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ