Outt
Sett
Behavioral task
behavioral1
Sample
bdbef952c436b80c386dc3a4ed98a9e3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdbef952c436b80c386dc3a4ed98a9e3_JaffaCakes118
Size
62KB
MD5
bdbef952c436b80c386dc3a4ed98a9e3
SHA1
33206ab5d7b4ba78c524d8991e243e89341ddb8b
SHA256
bdde4e427dd7a8d7a3a0d6d22c1007826c8da615270d86f69a0f2834e3aad2ff
SHA512
948953fdc742e2afb3cc76eb0c38fd44c1df2cc54d619416bff54eaab12a57b08696e35c5069c450ddefd065d2dc845d5f2e7041b4f5d6630e8eca17f9711176
SSDEEP
768:4X07tGPXE5WnLi6Iz/NPZPUD5ljd0cPApWLrbKN/VJyeuY29HTzr7l6Ydq0K/S/k:4sKXEcIiwcPHreNVPsH/r7ln96NiOB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdbef952c436b80c386dc3a4ed98a9e3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ