Outt
Sett
Behavioral task
behavioral1
Sample
bc61bdb03a2866c01e33c4448f517788_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bc61bdb03a2866c01e33c4448f517788_JaffaCakes118
Size
56KB
MD5
bc61bdb03a2866c01e33c4448f517788
SHA1
384ae28a0e32b539161cbc7a12ef75afcb751383
SHA256
c522c7f0927ff266af7c52632da3cc5a7b5d70bd16a1135058b3ce90fc70715c
SHA512
b539f00a1aacc7e79e58040092fb28eb257408319d07e9db571cb81e0c18b6a3ad6c2e4ceb51dd6696d08d736b0ca0ad798552ad291d700353a74fc2a84948e6
SSDEEP
1536:yHZEGXbIgafnCzD+1i0kAerq5Qi8l2Yb8:yH9XbIHCzy1i2pGRlbb8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc61bdb03a2866c01e33c4448f517788_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ