Outt
Sett
Behavioral task
behavioral1
Sample
bca8889facc2a900fd56aa1c12a2fc2d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bca8889facc2a900fd56aa1c12a2fc2d_JaffaCakes118
Size
52KB
MD5
bca8889facc2a900fd56aa1c12a2fc2d
SHA1
684394f4200c23050646da49b1c4ecd9486227cb
SHA256
f8dc82d0b854669dfc7d068ef9e65281862277cd7815c8b41eb40a2a750afee2
SHA512
b93b13a4e00cb0072bdf1e17fcdb6134a2142bd2f04012b3f5fb3efa1b2108962dfa62b60b3b0ddfcd96c93628034d9780411dfa94ae76eecc5604c293f8bead
SSDEEP
768:9xBtKtqyLUv+zTvtMd7LKICtCezuA8FqYl0Cibb99klIdy3PLowkKZ1U42izUpVu:9t4ud/h1IYK3Zmzzow7Z1jPglFRnY/l
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bca8889facc2a900fd56aa1c12a2fc2d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ