Outt
Sett
Behavioral task
behavioral1
Sample
bc6b8a6e740d32dfb1e2ddd5d0c068b4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc6b8a6e740d32dfb1e2ddd5d0c068b4_JaffaCakes118
Size
75KB
MD5
bc6b8a6e740d32dfb1e2ddd5d0c068b4
SHA1
d11859f8f8a18de1a010649122ef3450f3085568
SHA256
9a437865ff99cb8885cdf7af763d24dbdb589733ba243efb6594fe9b2387832e
SHA512
914470b569135c0f3a5d485ffcd8fc5c637b0bb47e5c4f89a7ad577138f5c87bafe9a8c1b7ddcbb456dbcd1950b894f6abac034b1f8be64c716f4cd18bc2d5d9
SSDEEP
1536:n7ZLNPp9pZBMdqqrs61CouCf0FwyuAZa7FqKGVwib67yJLPyq:7ZpporiouPFPa7FNGmtjq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc6b8a6e740d32dfb1e2ddd5d0c068b4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ