Outt
Sett
Behavioral task
behavioral1
Sample
bcd6336071619704f13f45b87ee47f4b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcd6336071619704f13f45b87ee47f4b_JaffaCakes118
Size
58KB
MD5
bcd6336071619704f13f45b87ee47f4b
SHA1
3cb41c2c455ad224ad7d0ac43687e413b9982ba5
SHA256
e171db1d89d1d6aeee20e56154156b2c92e7a5df0dd66b84239ff934ad139b92
SHA512
710c7fb7b61ff6404e04ca425a5761870b723b625b4fb3a39ef29d0a0a888601ded5f72c8e30b8100f06c424c7e532c57f731a91a2f89e1eabd57dc3dd70dbd4
SSDEEP
1536:1zExMwCGQ2jdMuxa3zA7h1NQWJQAOGHlVY2lWTfBSNHz0/xAq:1I+wCGv5Mu03Mt1NQKQHmDXlWjBL/9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcd6336071619704f13f45b87ee47f4b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ