Outt
Sett
Behavioral task
behavioral1
Sample
bcc344a24be43d9d45012f5b39d7750c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcc344a24be43d9d45012f5b39d7750c_JaffaCakes118
Size
79KB
MD5
bcc344a24be43d9d45012f5b39d7750c
SHA1
561c33876ba6c5344087e19789a740231915b387
SHA256
ce736aea601ee174235339b674dfe2a42cb03738519590ee2455fcaf77945484
SHA512
40fdec8249fc7b730a209b9418f16b071baac8a845a10ea15550f640b7d23352ac4ef0914d8dba2f5e37c579ca12e531f4fb9910bd91dbc651d67d749aa8c5bb
SSDEEP
1536:Bm1NGJVGiyIyzWQJEosWVcGLuOmclrNGQ5co4YTorDU:kX0VLsWQKosW6GLuOmc9Io4VDU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcc344a24be43d9d45012f5b39d7750c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ