Outt
Sett
Behavioral task
behavioral1
Sample
bf20483aab98c28f0264c70cface03cc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bf20483aab98c28f0264c70cface03cc_JaffaCakes118
Size
60KB
MD5
bf20483aab98c28f0264c70cface03cc
SHA1
c329400719b68d74f658977882e42aa84d16f0f1
SHA256
d3105dba18a337ea21a45942c918b9dbdd4b7df372b8577b98b8a52453b03e79
SHA512
49288629478425b502be65892d00654c3374df468e8661f92d51b8a03278d6b7d56d2879a5be6881eb94d088f1ba97fd4956d0e495a78afe6305e897d56b2e07
SSDEEP
768:GbvLDaaMact8Teeq/pe8N/WqPDgIkWezUteBJBkThOGeUwgZvIPcpCG9AGpDheE7:evsBsqbgbzUpfIPI9AGdMER4hpFTItb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf20483aab98c28f0264c70cface03cc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ