Outt
Sett
Behavioral task
behavioral1
Sample
bc1a582febaede877aa7aad95e0e4036_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc1a582febaede877aa7aad95e0e4036_JaffaCakes118
Size
71KB
MD5
bc1a582febaede877aa7aad95e0e4036
SHA1
0dc17f8b021c9d907ccf29a46e4870d74b50ffc9
SHA256
272b0af4adf1cf3cf18cff4e34af03b38e2a0abae22167c85504ef0be2dbffe5
SHA512
d5099efd1870dc7c31e906919e429933a7ebc5031da5827b5908318342194c0ed688ba4622115df76dc64b966c3e0e8f1a00857da57e69a23409b98c30ee1d65
SSDEEP
1536:agF0eiyUcbreJ8QvkR3rjVIglk0oBE8V7UdbJl9fB2ajAsOc6q:t2yFPeCxgYKLV709hRjAc6q
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc1a582febaede877aa7aad95e0e4036_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ