Outt
Sett
Behavioral task
behavioral1
Sample
bdea40e0b8aa2c71ce9628975a710f57_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdea40e0b8aa2c71ce9628975a710f57_JaffaCakes118
Size
55KB
MD5
bdea40e0b8aa2c71ce9628975a710f57
SHA1
f55b8c2f641ca66016f0f69ab450de12a966139e
SHA256
ec7979947ef0b18803c58eb6f7610486e31fa8c825019a1d8c5e0e3b2ecff385
SHA512
e3c5025eadbe069ece9fb0a1dc22f1391eb69a2520cba1ea0e82f25554eae86258ee3f1c6b50d74ed9e852335d701813a19eb988a2ee6c81603fd87b3633b524
SSDEEP
1536:GQ3tfgXK6IsxxIUONH/FtlIAuzXE2flNWn7KXcS35msE:VfgXKVsxKPH9tWI6Pg2XFcsE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdea40e0b8aa2c71ce9628975a710f57_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ