Outt
Sett
Behavioral task
behavioral1
Sample
bdf4957984f2d8f9aaaef1419ecca293_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdf4957984f2d8f9aaaef1419ecca293_JaffaCakes118
Size
64KB
MD5
bdf4957984f2d8f9aaaef1419ecca293
SHA1
2c1daeb352e4c985745e5e9ba933198cb3765a53
SHA256
dfecf7577aa85a33e5f3eb7263c7b797a80fe3b061ee71a41f446ee4f60ceb7d
SHA512
4a80bb965164210118fd02a6e58b5a2f0181448b352b7018ea76e62625eb742a7a2c53f78f4536d62b326a52a7080e525321f92f150770ed1ec7013cc0e9c39d
SSDEEP
768:qz6nzm1b5gNZLLrQu335GFV09tQTCeULIBpXlYrrdt0AoQLb51jovfV9YW1qC6K6:qmmMYY35GFgOTTsb3LYvfV9B65Ms3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdf4957984f2d8f9aaaef1419ecca293_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ