AC3ENC_ENCODER
AC3ENC_INIT
AC3ENC_VERSION
BS_About
Overview
overview
7Static
static
7BeSweet.exe
windows7-x64
7BeSweet.exe
windows10-2004-x64
7ac3enc.dll
windows7-x64
7ac3enc.dll
windows10-2004-x64
7azid.dll
windows7-x64
7azid.dll
windows10-2004-x64
7bsn.dll
windows7-x64
7bsn.dll
windows10-2004-x64
7help/core.html
windows7-x64
1help/core.html
windows10-2004-x64
1help/lame.html
windows7-x64
1help/lame.html
windows10-2004-x64
1help/ota.html
windows7-x64
1help/ota.html
windows10-2004-x64
1help/soundtouch.html
windows7-x64
1help/soundtouch.html
windows10-2004-x64
1hip.dll
windows7-x64
7hip.dll
windows10-2004-x64
7lame_enc.dll
windows7-x64
7lame_enc.dll
windows10-2004-x64
7mp2enc.dll
windows7-x64
7mp2enc.dll
windows10-2004-x64
7shibatch.dll
windows7-x64
7shibatch.dll
windows10-2004-x64
7soundtouch.dll
windows7-x64
7soundtouch.dll
windows10-2004-x64
7Behavioral task
behavioral1
Sample
BeSweet.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
BeSweet.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
ac3enc.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
ac3enc.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
azid.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
azid.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
bsn.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
bsn.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
help/core.html
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
help/core.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
help/lame.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
help/lame.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
help/ota.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
help/ota.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
help/soundtouch.html
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
help/soundtouch.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
hip.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
hip.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
lame_enc.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
lame_enc.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
mp2enc.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
mp2enc.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
shibatch.dll
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
shibatch.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
soundtouch.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
soundtouch.dll
Resource
win10v2004-20240419-en
Target
0cde8e8ddcb66f0dff6d5fbb2a979621_JaffaCakes118
Size
479KB
MD5
0cde8e8ddcb66f0dff6d5fbb2a979621
SHA1
1d59e6c3da521c97db6d92c26a7314f9863adf7e
SHA256
1b76fa7d39d5678b7801c853d8fc7968df4e32200953bc1878dc2a1d017de1ff
SHA512
4455031963c012341961090e01a0b6406cb7620198c796bdae6accc5b7dbe3d895357c2b1d6ae242cd1c41bff77c0907235f0c971e5b54cbd12382d39b426bd6
SSDEEP
12288:/PJGj4MKMH6Cc5gHp4mkExDli71g8zLKRJFxq/Aw5:/PJvcfOcPLWLKzF9w5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/ac3enc.dll | acprotect |
static1/unpack001/azid.dll | acprotect |
static1/unpack001/bsn.dll | acprotect |
static1/unpack001/hip.dll | acprotect |
static1/unpack001/lame_enc.dll | acprotect |
static1/unpack001/mp2enc.dll | acprotect |
static1/unpack001/shibatch.dll | acprotect |
static1/unpack001/soundtouch.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/BeSweet.exe | upx |
static1/unpack001/ac3enc.dll | upx |
static1/unpack001/azid.dll | upx |
static1/unpack001/bsn.dll | upx |
static1/unpack001/hip.dll | upx |
static1/unpack001/lame_enc.dll | upx |
static1/unpack001/mp2enc.dll | upx |
static1/unpack001/shibatch.dll | upx |
static1/unpack001/soundtouch.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/BeSweet.exe |
unpack001/ac3enc.dll |
unpack003/out.upx |
unpack001/azid.dll |
unpack004/out.upx |
unpack001/bsn.dll |
unpack005/out.upx |
unpack001/hip.dll |
unpack006/out.upx |
unpack001/lame_enc.dll |
unpack001/mp2enc.dll |
unpack001/shibatch.dll |
unpack009/out.upx |
unpack001/soundtouch.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AC3ENC_ENCODER
AC3ENC_INIT
AC3ENC_VERSION
BS_About
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ac3_clear
ac3_copyright
ac3_decode
ac3_decodebsi
ac3_errormsg
ac3_free
ac3_getchannels
ac3_geterror
ac3_getinfo
ac3_init
ac3_legal
ac3_nidecode
ac3_readframe
ac3_regsettings
ac3_setinfo
ac3_version
ac3_warningmsg
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BSN_DeInit
BSN_Echo
BSN_EncodeBlock
BSN_Init
BSN_TaggerDO
BSN_TaggerInit
BSN_TaggerSetup
BS_About
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BS_About
ExitMP3
HIP_callback
InitMP3
Peak
decodeMP3
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beInitStream
beVersion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BS_About
EQU_callback
EQU_init
EQU_output
EQU_quit
deinit_ssrc
downsample
init_ssrc
ssrc_callback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
st_init
st_process
st_version
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE