Outt
Sett
Behavioral task
behavioral1
Sample
bcdef9d05436c838137cfb96d1cfc91a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcdef9d05436c838137cfb96d1cfc91a_JaffaCakes118
Size
62KB
MD5
bcdef9d05436c838137cfb96d1cfc91a
SHA1
78d489b80efd542693cc2334bb8d906918739967
SHA256
1ede33127c134dcadd6bcc59b7f2ad2855469539b0b619db08cad0e068578978
SHA512
c449db851007e2bfe74939c38dc3b32f879867ff2be55ba3e0d252a5ec956dd5800a1d652df64c4fdeab23efd9bf1f6d3f3f0cade9e07505e41ccdec4b94ef04
SSDEEP
1536:ev8LDezUWVUxW4sEgdPSqqWoE7qUkzk3mXuTDeT:/feAWKxQEgdDaEsvXuvK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcdef9d05436c838137cfb96d1cfc91a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ