Outt
Sett
Behavioral task
behavioral1
Sample
bf0de0cbe5c4e38e5fa5f4a0ca5ee81c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf0de0cbe5c4e38e5fa5f4a0ca5ee81c_JaffaCakes118
Size
51KB
MD5
bf0de0cbe5c4e38e5fa5f4a0ca5ee81c
SHA1
e122b16d5633d60e4b1372b19e9b8f1093bdd95c
SHA256
3cc8dce4f8998cbf09267ab264fa8e3bef0cab09ab8bda8e54ea6e3a22861b7a
SHA512
adb80cc98e4269773826117b9d5fbc039738ef583b396f3d4cd381959fc6261d09c0c054e7c909007bbad6fc854d2853e49b8ad6a1f92aade98680f9f2cbf773
SSDEEP
768:z3OHS8KOzzIIYpqtmG17gPhTfUjpPK/XyoviRYt/A4FndWP3p3HClq4hxkB:yHZw1NG17STAPw1/ARP3p3R4hx8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf0de0cbe5c4e38e5fa5f4a0ca5ee81c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ