Outt
Sett
Behavioral task
behavioral1
Sample
bcbc080c42f2c5cdfa112bf554d81733_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcbc080c42f2c5cdfa112bf554d81733_JaffaCakes118
Size
54KB
MD5
bcbc080c42f2c5cdfa112bf554d81733
SHA1
82c56dea4f0a3b6fc0579874d2917e26812f1002
SHA256
ad4e342eef4e936dd580a73857464670773311eef049458f9cc85ae771685f8f
SHA512
c31e8300182950c5c9acc270092cc2ee21e5b5baeb98abb34ba14a6b4f9a2323773a96d1c14da6e31776b6a4ab40323641d652c53d6601d6967ad5410f9487ca
SSDEEP
1536:MhBRVgrExucMgRDZ/gU3bluXJ20g94bjqFL9c0KR:cRRs6ZIDM0g94b/v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcbc080c42f2c5cdfa112bf554d81733_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ