Outt
Sett
Behavioral task
behavioral1
Sample
bdf32e1fd220cf8086df1705f0fa57af_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdf32e1fd220cf8086df1705f0fa57af_JaffaCakes118
Size
50KB
MD5
bdf32e1fd220cf8086df1705f0fa57af
SHA1
7ef3b3eea0e8a3f9266ee3bb4cd8d73a376ebffc
SHA256
50dd015c39881d6fca288ea673a190ac850d7dc35ab35c8596c1064242eae0e0
SHA512
864d9f80dbf482ff3b011449c64dc4486e7ca4a1ad3c34992310ce626d32ecf0966258b2ba12185bf1311908bfab8265102c5f7e49da9edf57fb3b8509366223
SSDEEP
768:GbvLDaaMact8T32mwke26sac3BYfZfMGpFvYRQSA48OzxfjERtFzi6t5HKZ+ZjK:evKmtevc3BYfZfMMvM1jxfjERXlZe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdf32e1fd220cf8086df1705f0fa57af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ