Outt
Sett
Behavioral task
behavioral1
Sample
bc54cdcfc4bfba8906be5104e4c13831_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc54cdcfc4bfba8906be5104e4c13831_JaffaCakes118
Size
47KB
MD5
bc54cdcfc4bfba8906be5104e4c13831
SHA1
703eb0450701d8e327f23522231fcb10fceff76a
SHA256
76ac140773cc67473ef62186d33badb5f5d27c3b46703758a01f21efbfcb466e
SHA512
94df97aca21f3b485632fb15d19e4df82a670f246660a624e2ecb78be5c12934d38c30ad564de278e413f0d014bdfdfaef034873b7f016582fe7d4173c917fbc
SSDEEP
768:h8WTpVT0X8zbe6NfOwxk81Nfk3Obl/lZZpmxhmREM2Uw/Z4VZgOwUg/yIPmcr:RVHxkYfgOblLZAKOVUw/ZYJg/yIOcr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc54cdcfc4bfba8906be5104e4c13831_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ