Outt
Sett
Behavioral task
behavioral1
Sample
bc7ef6a889306e59909a78bea88a03ac_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc7ef6a889306e59909a78bea88a03ac_JaffaCakes118
Size
63KB
MD5
bc7ef6a889306e59909a78bea88a03ac
SHA1
cf085d03377577f0c6401e283436e2831ead16a9
SHA256
1ac79890a9e1af251e88279c6b63d00a767e68bf4673c320c1fe43b5ef618a68
SHA512
d2a535a4c764c2fa581dd8788ef18c2716228c46ad367827b662ea65ede0a4b457ab339cae9c3bb6ad959f55ff50f392c54b134f1310c9d6c69600669c6fa4f7
SSDEEP
1536:V2btcbsegBIciRbGVhLose0cFRMd3INrqOnzd83nQ:WtcoeOItbCoDhRCuRzd8XQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc7ef6a889306e59909a78bea88a03ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ