Outt
Sett
Behavioral task
behavioral1
Sample
bde51593f2a1e48684675f3faa1a317a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bde51593f2a1e48684675f3faa1a317a_JaffaCakes118
Size
71KB
MD5
bde51593f2a1e48684675f3faa1a317a
SHA1
aab6c18b660b7bf296780498e513c1d4a3c9b3a4
SHA256
f447192f7d577f187cf44324819c4209ab08878055e0194af99ffa8db32bcf2c
SHA512
d333a53c56ec28e0f9700b90ebf5c20baecbada104d916ca125b277e450577d0d234a80cfbe21f714aeb8e05eefc6df0e0b428e950ec3b20b716ef4044528f65
SSDEEP
1536:Bm1NGJVG11GdSNbIuGctsjOyou5SLylfP764x0jxExG2Pe3Br/Yt:kX0V61GcNb0cmPou5DlfW4ajSxGL3BjY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bde51593f2a1e48684675f3faa1a317a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ