Outt
Sett
Behavioral task
behavioral1
Sample
bcdd7f421f03e9ceaa74769bfa695668_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bcdd7f421f03e9ceaa74769bfa695668_JaffaCakes118
Size
62KB
MD5
bcdd7f421f03e9ceaa74769bfa695668
SHA1
9a288ea7d6a6b7dbc3a4ad54e0e1372f5d426efb
SHA256
991117290f5d98ad6c5d23dd8ea56882078d851c8dee4b0341c10777676eeb9e
SHA512
4ffb620ef053df4f109f0bd576b6496243a351cedeae8440a182c2766b7e7166f10e7f159d31bc93c522358a6b6d736c115a0de60789bd3659972562089b776d
SSDEEP
768:56IRmOOuxGSKYnJJ3uihzPcIfnaWnOxTyHt+nqDeFpYHBe2zuFT/deUVcDx:5jRmOhGE3uk/I+twHFpMw2S7jcDx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcdd7f421f03e9ceaa74769bfa695668_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ