Outt
Sett
Behavioral task
behavioral1
Sample
bcc60f0ebc3a49abb894c6dc4bc214f6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bcc60f0ebc3a49abb894c6dc4bc214f6_JaffaCakes118
Size
47KB
MD5
bcc60f0ebc3a49abb894c6dc4bc214f6
SHA1
b435b52def55d9ee2bc35fb1f52180cc0a2fa5e2
SHA256
f07d33b0116a1a67557649900c223aebfe3a7d7fb549afe97299be2c70fc6015
SHA512
7d7ca7799af8b3022dc688568b6ca8ceb4dba36d550098cecbf2a520ee889a7bde7845d5288593a5428ded1e95a7abc97ce5c7f76e7b6d587137c9bf042a8728
SSDEEP
768:nbY4liqTqLMZe0lqrpIfHpsjH9Dx5aTVGdXhDasMebmgn5:EGi2jl3JAH9Dx5sGXhoin5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcc60f0ebc3a49abb894c6dc4bc214f6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ