Outt
Sett
Behavioral task
behavioral1
Sample
bef7577cdd0ed3923415acea834030bc_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bef7577cdd0ed3923415acea834030bc_JaffaCakes118
Size
53KB
MD5
bef7577cdd0ed3923415acea834030bc
SHA1
0953ec2d529fa2fdc1dc89a3320dd58d4e0bb862
SHA256
77246f61e5db76c18493a272d6c2a66bc4a010223a50b2b70bc534cce674d250
SHA512
8aa252b3c84605c334c255533e254f09179986192b27e25c693ee8b1aee1d4fa7d46f26573d7455bd6d8ecf97eb7fa83d9d27068b2287dd3bae0476ef78d0020
SSDEEP
768:h8WTpVT0X8zbqzo6krl3kMY6uI4DRaNU/u/gOVA9H1qPbQicjeU4n6xx19yPlSAI:RVOJgl354Dsuu/gOZcLVOYleLOa2h2c5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bef7577cdd0ed3923415acea834030bc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ