Outt
Sett
Behavioral task
behavioral1
Sample
bbbc1714a0e41b2aaf4504a4ca159274_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bbbc1714a0e41b2aaf4504a4ca159274_JaffaCakes118
Size
78KB
MD5
bbbc1714a0e41b2aaf4504a4ca159274
SHA1
f2f741416798d40ef570126da2c3beca65c075b2
SHA256
5acfbceceb12fc859587699bfcb9da11f31754064f194b113b3abeec5de7aaa3
SHA512
75baf6abd712e54ed65224e5c5d0cae6f8aec03514baf16cdd8cc867d405fc4e1eaf1277208236c7b2e299d5779389be6a7f69c14e57d164529770f7f86fbe73
SSDEEP
1536:1zExMwCGQ2jZvfHHd+axeRMzxIHHlFA0r/VpZpvNY3054G45VdGtB27kHfO+Fpnx:1I+wCGvFdie9IlFL/VHFEaNtBcOfdpWI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbbc1714a0e41b2aaf4504a4ca159274_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ