Outt
Sett
Behavioral task
behavioral1
Sample
bded8474add84fbdb8c474c7485c6a92_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bded8474add84fbdb8c474c7485c6a92_JaffaCakes118
Size
64KB
MD5
bded8474add84fbdb8c474c7485c6a92
SHA1
950a2c1ee1915b768162c0ce0925059fdf99fa92
SHA256
d09fcdaf9efa1c6a6aa228e109c2373d30f5a40158e6e649d6cca0d083e2e573
SHA512
7f1adfde49bc30afaefb2da593d7477189d6bed7dacfd8916d918bfb938866a9d88d998ba374e218432cf6bacf251ae63b7d3dfc15e8ae66db728b026e335014
SSDEEP
768:GbvLDaaMact8TKleVJYMzrT6JTgX4NOmziUDlqjc9dzIhYw9t9LAOmtq0ZYxyvs2:evOWYMfuY4rDUjc9dw9tFA75YxMb6gz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bded8474add84fbdb8c474c7485c6a92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ