Outt
Sett
Behavioral task
behavioral1
Sample
bdfbd93ddcda062d3a0dbbd29595e4f7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdfbd93ddcda062d3a0dbbd29595e4f7_JaffaCakes118
Size
61KB
MD5
bdfbd93ddcda062d3a0dbbd29595e4f7
SHA1
e90edcd4e602a2e3f822de70140afe03fb729af8
SHA256
0d97f63b44e6eefeb2830373e809ef0a5fedd2074992c0537de00148ae1c4e5f
SHA512
fd7ab84a7dd6c5d0c3d6d482f530a4d2960428f2d767979f25700ce3cb8e12fed6fb4d047cbfda347f933fa11d275d184794112d3010088e2d13e4aebbeb96cd
SSDEEP
1536:evea4o6LxcSHh9eEkGQQlAd65Al39Z4AqD1x7M:/foApHh9etIAEaN9ZlqTw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdfbd93ddcda062d3a0dbbd29595e4f7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ