Outt
Sett
Behavioral task
behavioral1
Sample
bdbaab697bc4cfb1b4156680a1df6ee4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdbaab697bc4cfb1b4156680a1df6ee4_JaffaCakes118
Size
55KB
MD5
bdbaab697bc4cfb1b4156680a1df6ee4
SHA1
5e00c559734f49eb375d6e628752168a411e3f2a
SHA256
d14bf90c829ab6c047ff0f0183ac2148e0d04d0747ea01deb84e2c3ed1601a35
SHA512
6eba4a387829a63cc9fdfa94d5475e4b6a8fbdb8bb5864314684454cf1c0d9350baba2fe86f29249eeeb0814a13f17be606f7bae80f7457f5c97c8120addb01d
SSDEEP
768:h8WTpVT0X8zbMDITZlrRpWkr9hb1L3PQVZZlBuITOJZxu0obHhXfG5/JHqw7k/9H:RV3TZlr39p1L3PQV1slxDotXWBHc/YGH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdbaab697bc4cfb1b4156680a1df6ee4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ