Outt
Sett
Behavioral task
behavioral1
Sample
bc45aad6c7a060a16d3260d703343194_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bc45aad6c7a060a16d3260d703343194_JaffaCakes118
Size
72KB
MD5
bc45aad6c7a060a16d3260d703343194
SHA1
9841a4501fcdcdd9d591fb3a4382dd9cdcbf2d4f
SHA256
ff1aedfb4d10a8df4d81181ae002c38c0c68a5df8f2e643af4db69077af793e2
SHA512
f6c911188062ac1b1a36d97d5718f6876f9d6d71da4a9b9f5b24ea7f1ce98c8425c493372e97e723d60b529e322adfac059b041b2616476171a15b3d1dc9a10d
SSDEEP
1536:mPO6KEVbsVP0gpH/qiJX7Tmrac3Z5QdFc8re0qh5cc5dFn5s05SZvQ6y:cMEVbsVcsRLU3XQbJrNqhmgj5gFu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc45aad6c7a060a16d3260d703343194_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ