Outt
Sett
Behavioral task
behavioral1
Sample
bdb9a89df914f98902d030d18fe4b6f8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdb9a89df914f98902d030d18fe4b6f8_JaffaCakes118
Size
81KB
MD5
bdb9a89df914f98902d030d18fe4b6f8
SHA1
978f0b33a8237fee3f493852492885a84b081b25
SHA256
b7df4a8a065a910b9ed6c68202f3fa12fd5b08ee372970af0e301781f1d2457b
SHA512
e7d941ea53baf6286ae8379196b8021fa1a13738d63e37856f331833aaaf258da3a71add1a106c81baa3b5c0006ae3e636800de59367cdb58dd15b37fc78dcda
SSDEEP
1536:tm8Uu4ZFCbWlaeh8qaDk3SwfjuWQHBnsB+UAiGr5P2y:cu4ZFCbWlaeh89IjU+B+UpM2y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdb9a89df914f98902d030d18fe4b6f8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ