Outt
Sett
Behavioral task
behavioral1
Sample
bcebe97a6e27cde1d8c02657945fc51b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcebe97a6e27cde1d8c02657945fc51b_JaffaCakes118
Size
64KB
MD5
bcebe97a6e27cde1d8c02657945fc51b
SHA1
b7994a7b5d05f629facf985c880bcc19b5dff19e
SHA256
df167b774a0d344e4b2161bb1d8ad19bf7e8553d1a4734775a474fbb6d8bcb0b
SHA512
407c2d35f128a463fbf6a22e9be2ac480dc20e3c8fe1da6928baa4552b55f3d776cd0be93c038aba09148856e95607df954c44613b4d4f0a4268a327f07ea770
SSDEEP
1536:EGWbtTCbe2x5CJizguAshJ3CJUeMh+55H0u:EGaTUecyizguzSJUea+55Uu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcebe97a6e27cde1d8c02657945fc51b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ