Outt
Sett
Behavioral task
behavioral1
Sample
bf133c2c0c36ff5de54f84682f8298d4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bf133c2c0c36ff5de54f84682f8298d4_JaffaCakes118
Size
52KB
MD5
bf133c2c0c36ff5de54f84682f8298d4
SHA1
b0fb4f62ed1799d3db5ced4d23a516e2057e9cfb
SHA256
5a404f65d3ce94e64008d0bdbd3b0394ada9e4770c10ff1fa14091524ed77e07
SHA512
8daf1f1ffe1437339d42933c64b07bfac6ecb7212d54d1cd44b63625f175a6b2cd609fc8fee9b508199503d1871ff1d02a7eacd0d1ef48c92ed2d355dbc4b1cf
SSDEEP
768:yuUr3ip/IHI7NQTvUBbOsEWQddzPyYC25zci7E+FX7potiQpHbvl2pLCPMBfr08J:yl3E0Tfs9QztC2tcjarqt7gpLyIlP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf133c2c0c36ff5de54f84682f8298d4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ