Outt
Sett
Behavioral task
behavioral1
Sample
bdd6bd795fd2939f5ac1bbb70e6120a5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bdd6bd795fd2939f5ac1bbb70e6120a5_JaffaCakes118
Size
67KB
MD5
bdd6bd795fd2939f5ac1bbb70e6120a5
SHA1
0c6147f762b25cb8256b4f0a1f81bf55a2f0e12b
SHA256
d5a923ce6025fd72f3c353554d8b7ab8e8720ef214f41a9120963ef4158943ff
SHA512
33485a9fdd06cdade5bcd5ba90a236a9e584bab6fd8a3d18f736e7660fce74e5b9fadfbd3805820f4189839dda979b7ead272aeb8e1c94cee42628f454a4991a
SSDEEP
1536:evpB5f129pRUoCyrFclHOf5XC6dpPVHLEst2PC:qGRUoCyrCwDdVVHLxt2PC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdd6bd795fd2939f5ac1bbb70e6120a5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ