Outt
Sett
Behavioral task
behavioral1
Sample
bc81635b4962408d46b7f7d7c8f49390_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bc81635b4962408d46b7f7d7c8f49390_JaffaCakes118
Size
80KB
MD5
bc81635b4962408d46b7f7d7c8f49390
SHA1
72ee4abfba98acb83f975c8c41ac302278febf1a
SHA256
078ecaf340c5ab4b7a35f1355247c7833bae0c2c5b47e7673bec2da67881b9e0
SHA512
2dcd2d0a7b38554959f761b63879e5b35a50ab8d44689524cfad0d54682075a2b7f83b8cecb4c4d8cd4488f56a03056e70e963cd572af2e45c9746f87be162e6
SSDEEP
1536:soa1lMWi6e6SYWaz7YY+0Hv2UNg7tPse3E2VAmMOWmz0d9GsfkgN/hP:SMWi6e6Xb+0PjNgtJEOF/0asfLNZP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc81635b4962408d46b7f7d7c8f49390_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ