Outt
Sett
Behavioral task
behavioral1
Sample
bc5894e460fa1ffa90ba2ef26343e65d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc5894e460fa1ffa90ba2ef26343e65d_JaffaCakes118
Size
57KB
MD5
bc5894e460fa1ffa90ba2ef26343e65d
SHA1
ccb77bf444969557f3a35cdacddda65122ce0270
SHA256
ba45a8df0c02c9ae98fefe3e71a3ff9f28b8eb3de21009c3e55f06e13131eb05
SHA512
a129d515931f55b5ba67529579c8c436e7597b0c803508e26b81a5fa0587aee60888461b37bf8c9b82b8ea5273b3b9fef60ff8363da5637992260c060a3d9954
SSDEEP
1536:23umoMtxNZr4wtCNTDyqhBqUD2rMakyEm8zilLHYXhG:CoMtx0w0vBX2YjvlxXhG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc5894e460fa1ffa90ba2ef26343e65d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ