Outt
Sett
Behavioral task
behavioral1
Sample
bce8ce4d954f4e85c44c3ce68a4883c5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bce8ce4d954f4e85c44c3ce68a4883c5_JaffaCakes118
Size
48KB
MD5
bce8ce4d954f4e85c44c3ce68a4883c5
SHA1
4f7b4b997848d3d9325a355ddf21b90fbe95feac
SHA256
c9c9b044cb1e9defd91633b8d7adc77dcffbfc47b3bb8110f21b7d9101de14d3
SHA512
b9448ade646568cab489c0e545771985fc5a798cf8b60456ba431986efe589621bc98dac0d3a8c77abfa5183d3b575cfe0ce89e3c83f186358b75440ed355a48
SSDEEP
768:Gx4m7JNSll3dTG+IsEoIEQcUmYwn71eIC6QYA4D/iTdXFSAJRy:Bm1NGJVGjsxIEZ9NC6VA4bUXFPJRy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bce8ce4d954f4e85c44c3ce68a4883c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ