Outt
Sett
Behavioral task
behavioral1
Sample
bcab63f19b49b406ef2f5f86505f5e52_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bcab63f19b49b406ef2f5f86505f5e52_JaffaCakes118
Size
45KB
MD5
bcab63f19b49b406ef2f5f86505f5e52
SHA1
ecf06b1883b32fb8f90a74709d03efbe5988b210
SHA256
bf6833013977d3e326173ba47c5f4b6cdcea9261eff73a49ba143269321c39d9
SHA512
2ff8f2c28607a698f95a1e0fe3c0a843397b3075f9da1808f777d14f00ed1efd9814593edd4ffc7e9be6cfec2e95f7d6c073c2ca49bf75b1c7fad937f305b471
SSDEEP
768:szM2xVV/PHlpSwdRWGlNwhrncDKnvLe3GTXLNJnkiNMX5fQS9fLCtfMZ3MQI1L/U:V2b5h7W2fql7LNaiNMYS9fLek8RS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcab63f19b49b406ef2f5f86505f5e52_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ