Outt
Sett
Behavioral task
behavioral1
Sample
bc26fb29f14d85b3964de34e80453018_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc26fb29f14d85b3964de34e80453018_JaffaCakes118
Size
68KB
MD5
bc26fb29f14d85b3964de34e80453018
SHA1
5e6e5609cdf2414a56a5f8876a88fa61173dc201
SHA256
356d19f968a4e5a32c270d3fd3786d5e5cc0e18215304b32198f199aaa7fa4ec
SHA512
0b07bd8ee10483467d584a70c71f80036842b772212a885ff985a8fa44ab96151db1d71927eee0f82b40b67a3fff4da9dc4ac9babb27586d4968fd7166fca098
SSDEEP
1536:Bm1NGJVG1JFzLjbmmxG9H6B8nuB3o1SrDC4tPsETehzg6:kX0Voz7mmYEB8nM3oOPsEShzD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc26fb29f14d85b3964de34e80453018_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ