Outt
Sett
Behavioral task
behavioral1
Sample
bcd38cd88ee7b4d01654fbbeb06c4e34_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcd38cd88ee7b4d01654fbbeb06c4e34_JaffaCakes118
Size
58KB
MD5
bcd38cd88ee7b4d01654fbbeb06c4e34
SHA1
b39d969bcba6b4eb0a33c2c2ee247b23d3284129
SHA256
b7f7563fb68e76df0105f656a71952fd154c08b1520ebda2880a746d27c813fb
SHA512
5b4a92ae660e3e571dc1acf75b42030471816fa1daa4893465a8550d372983ce06cc4daaeb115d410529285fb4c82a1378212be345129798e88634ff0d6879eb
SSDEEP
768:GbvLDaaMact8TkJ0ztwC5IvhdYgqJVQ0gm8h5X7H+h+ejx7xQZQ7Y5pEjpidWC++:ev4ORwBrq8Lzwzjx7c5pkM6ly+wGJOr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcd38cd88ee7b4d01654fbbeb06c4e34_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ