Outt
Sett
Behavioral task
behavioral1
Sample
bf09837f38d34eca6ae751fe79e0fb35_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf09837f38d34eca6ae751fe79e0fb35_JaffaCakes118
Size
55KB
MD5
bf09837f38d34eca6ae751fe79e0fb35
SHA1
c2ae6d8a4adfad7e679974a610a1a8f164ccb2c0
SHA256
7001e27e331f6195c74f59f16c0db22bf472c157610b9847f9690b9fbd0a2ae8
SHA512
cb8439c174aee2fc0a14b7ee2abfcdbcf78e66f59a9de363f1058ea4386eb8f2464e70cafe4a2b3f8614e9edfcf2517e860bb99aa8664f2b10a886a9d47ec1ae
SSDEEP
768:uDhfiFP8PlmvgSyZgK6OeRh9QDHfejE8j843JQVijLtwdkgqgIoG4pXx4yvegMWj:2hq93+DHfWhJQijLtw+ngW4pcgMWHlB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf09837f38d34eca6ae751fe79e0fb35_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ