Outt
Sett
Behavioral task
behavioral1
Sample
bde1a4a27551d1fc0d742c020deee114_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bde1a4a27551d1fc0d742c020deee114_JaffaCakes118
Size
59KB
MD5
bde1a4a27551d1fc0d742c020deee114
SHA1
353890f36f77d7830361ae0ab93c728d319a72b4
SHA256
d96acd3dbb9d257d0669f6873f43e2429e38f5a50cb2df7649394b7e11ef7b83
SHA512
de0319a76cc3b8cda0d0e24e4c7846621695efa4b650404051399893d44248bc0d3f1793abaa183311441eca966fc6b94a97a0f3b029d3138a3f0dd662acdff6
SSDEEP
1536:mPO6KEVbsVP0gtLp7hNCgHhXRkueFncXogqtgnWBl/:cMEVbsVc6tbIDu3C
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bde1a4a27551d1fc0d742c020deee114_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ