Outt
Sett
Behavioral task
behavioral1
Sample
bcd5de130bdc3a8a626fe35acbdf4259_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcd5de130bdc3a8a626fe35acbdf4259_JaffaCakes118
Size
61KB
MD5
bcd5de130bdc3a8a626fe35acbdf4259
SHA1
16db3766f895281f6c2a132d90b42c8d5d99fcef
SHA256
88ae69c161017e5ca6093a8d1e4730aada1fa91c4bfc775dd46e74654d2982b0
SHA512
363f5ef3ee5e179d5f94bd26cf700e5fbe24f865af358fb3dfa19608f2d7d3d14f17c442687f5ad801aeacdbd1dddbe449187d2d5f7167e3409de2ead08cdf0f
SSDEEP
768:9xBtKtqyLUDCP55j/kfII/5VUL6yDzE8Vi1Uqr4Td9KFcss0kIV7ltjQr2l4CcYt:91CRSIGyLDzsZdsSVHcr2l6RYuQxD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcd5de130bdc3a8a626fe35acbdf4259_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ