Outt
Sett
Behavioral task
behavioral1
Sample
bdc9e551bd606d3d845d32d53c364fdf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bdc9e551bd606d3d845d32d53c364fdf_JaffaCakes118
Size
66KB
MD5
bdc9e551bd606d3d845d32d53c364fdf
SHA1
39558217a2c251c0bbc235cba712c2b9e461ce68
SHA256
eea2343ac70e71198d345db8ec81183d2495f261ec029c95be6c82327b525a14
SHA512
9753cf16ec38adb504bc20cd1eed0488a1567856c19d0ac865d647643fce6c5d4d91d2af2ae47abca6c8c2e0a9b5493974e21692d693674b253c6037738d91bd
SSDEEP
768:Gx4m7JNSll3dTG+GP9KJvYVYUT0Cc9yd+z+crrR2ztdKkOP7nlX0xejko37yXzVW:Bm1NGJVG/P8OVX7m+i2zxLeprqh74Z9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc9e551bd606d3d845d32d53c364fdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ