Outt
Sett
Behavioral task
behavioral1
Sample
bc68e5f0d3ebf3e1f23b29c9cf55ed9c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc68e5f0d3ebf3e1f23b29c9cf55ed9c_JaffaCakes118
Size
64KB
MD5
bc68e5f0d3ebf3e1f23b29c9cf55ed9c
SHA1
690b91e440e5fdb903353fcffe8d4c34c5576392
SHA256
a9c2c9515991ac57dd1b2b123c4af4d5802ae94f3def0bcef204ad3770105744
SHA512
21baae8c6e4ee160949762d9bfd9be19c7cb08058d3a2c188a89dd47e7474ff301b0b64c0c729d079be676be8c8b4c41b077f3c2a7c62cf3487522c0e75db283
SSDEEP
1536:anRbMDDFtnjAC3nipBqVO30WeFJ2vhAx2Q4bmHxfE:aRbMDDznypBzEWef282QcmHtE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc68e5f0d3ebf3e1f23b29c9cf55ed9c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ