Outt
Sett
Behavioral task
behavioral1
Sample
bc46ca09c99a37e2f33b974c21bcef92_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bc46ca09c99a37e2f33b974c21bcef92_JaffaCakes118
Size
61KB
MD5
bc46ca09c99a37e2f33b974c21bcef92
SHA1
3b494f85ae9f000ea91be9803d3100bfd09020cb
SHA256
924f3a66b3d78868e4105dbfd29f32763fab6f5cfd24fe56c6b0d4f3b2700a39
SHA512
88afb51b3e94afa558a90da6e11daa06d18ccb62a2ec5fc1671d0a9d24aab9f2ee3179532bb49c44b882987ec815cf39aed9fbebf2e8b6a74e806e3c3d6f03d7
SSDEEP
1536:yHZnsEb8CaG95PBv/FuIMyCsFvL+TIX7Pv0NQcO5:yHaEbmG95PBv/FbMMFvL+cjvQ+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc46ca09c99a37e2f33b974c21bcef92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ