Outt
Sett
Behavioral task
behavioral1
Sample
bc99ea5bb55de28610b8e1d7fe422031_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc99ea5bb55de28610b8e1d7fe422031_JaffaCakes118
Size
70KB
MD5
bc99ea5bb55de28610b8e1d7fe422031
SHA1
008dfcd8b521bf79b6a904b0e68585f3215c82eb
SHA256
c8c51beb40b0e4be952a97406f0ed972e93c6b5fe16ac8714de589e233a10756
SHA512
b1d290c3dc93097e085789f7eaf851cb91ea87cae1bb3c42707c4c4fc33c0c55b8f4fa7a65b1b43f31ddc0ed856f9a45c55e710dbb7406d916d3403a59bd61b5
SSDEEP
1536:RVdmkXvQPOy7Zu0VHo/4gR5nVWDA+mh/XuCTvdJMMsFyP1zV3:Tdmcu7LVI/4gbt++vddJwF81zt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc99ea5bb55de28610b8e1d7fe422031_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ