Outt
Sett
Behavioral task
behavioral1
Sample
bc19ee032df3f942575b2cc85ca2d34f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc19ee032df3f942575b2cc85ca2d34f_JaffaCakes118
Size
63KB
MD5
bc19ee032df3f942575b2cc85ca2d34f
SHA1
5a95fed6bb42c29ab2a728af40eaedf93d55a5cd
SHA256
2888d3065fc363561fdf4363027d27f3676f6bf97029858c8fea2bec1c1e6e24
SHA512
c6ed906a96eae69033cf1ae5402af9aa00eecd25258a7885d82e3b709ed981d4fc4c8ecb23947f242b7dc4550048d7fff01fea025b98e493f98a189ce862b541
SSDEEP
1536:V2bw2ZqYEZbmAw5kh1iQpiLlufJKMHoRgxAKvGCjUa8sxQUtm:Ww2Zq1FmjKiQIlsKMI8TQUI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc19ee032df3f942575b2cc85ca2d34f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ