Outt
Sett
Behavioral task
behavioral1
Sample
bfea6a05b7cb7cbc00ffcd55aabaeaf8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bfea6a05b7cb7cbc00ffcd55aabaeaf8_JaffaCakes118
Size
70KB
MD5
bfea6a05b7cb7cbc00ffcd55aabaeaf8
SHA1
36fdadbb355e784ca1cfeefe7ee9dbcd79a5b247
SHA256
635ad1c701fb0f4235eceb034806b835b1bac538ac5c99153088ff3a19475b9c
SHA512
d0e404030613625babdc30af293de0561d7daebf8b56edb8311c221d8640e092d495e930d2f08e8ca1830133062afdcc28997cf6a706f0a2389f8ee0037915c9
SSDEEP
1536:Bm1NGJVGHzn9OSvWmk5ZW+Z9bAOJaOoJU/77OX/LZ5A/:kX0V0zn9OSvWZw+Z98d9JU/OXTZm/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfea6a05b7cb7cbc00ffcd55aabaeaf8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ