Outt
Sett
Behavioral task
behavioral1
Sample
bc74393f5be8a28e6605a2ee0e2240af_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc74393f5be8a28e6605a2ee0e2240af_JaffaCakes118
Size
64KB
MD5
bc74393f5be8a28e6605a2ee0e2240af
SHA1
a06bedd99f9b46d1012d3136d6509ec87a5c68ce
SHA256
92307c9df69a66bebd189eb02efc2d87601a1f10b240f83f2047b13b1c9bb7cc
SHA512
29abe0a7a724b6b37847e059ab47c2d10f9007aed256ab6e5fcd8f43ab723e6a11120216fac20352456c6f0f95b156db671b06c5ae4723ec2c8b6ad8f056a22b
SSDEEP
768:m+YlPqpYYCug3xyAGZZxnQJiCtJVg6RBm39BbFfgeuF1lBOJDK7tC6FlNXZNW+gw:t1gIAdJnVS9Zqpjld7b3NW+u+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc74393f5be8a28e6605a2ee0e2240af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ