Outt
Sett
Behavioral task
behavioral1
Sample
bc4a41f4baa48d3a3c8d9a52598999f2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc4a41f4baa48d3a3c8d9a52598999f2_JaffaCakes118
Size
64KB
MD5
bc4a41f4baa48d3a3c8d9a52598999f2
SHA1
0abbffa96d789ce2a08f2b71b496126139b65ed2
SHA256
c64b8a4fb074b990c9dedcaee2856867ee0f09bae160acac5c2a12144093d175
SHA512
82f3ab5c3bd66cb2e67671f29522b75829379dc877aee6bfbdae887e0c4ee237e28bee3473e396646a2bc157ae140ccdecceda842fad72aead39f1c6ac15ce3d
SSDEEP
1536:evxQycnHL8CXwzQ9Y5vf9gtk5or3I7UoI:wqH/p9+vfukKr3I7jI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc4a41f4baa48d3a3c8d9a52598999f2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ