Outt
Sett
Behavioral task
behavioral1
Sample
bf1f05c37fc0ce66a4ebfa69bc050195_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf1f05c37fc0ce66a4ebfa69bc050195_JaffaCakes118
Size
59KB
MD5
bf1f05c37fc0ce66a4ebfa69bc050195
SHA1
74c1a9942003efb3ba1b4c67f3fc3e214fd783a3
SHA256
b944ef2c9c6fe50e60044ef000c6a41c0f6c9081d585e1e5f322dab8dde67590
SHA512
4964426185fa3bb1354318aaea600414b5d98fbc7274e6905b026813b10378fdee60c692f1053ee2cc34e611c080e50cd9d7413b9e4226eb081bb10e537c0ed2
SSDEEP
1536:mPO6KEVbsVP0gXM/GKIoLHAks5U/j1FQ0FNwQ//ZT:cMEVbsVcXBIegkaU71FQ03p//9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf1f05c37fc0ce66a4ebfa69bc050195_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ