Outt
Sett
Behavioral task
behavioral1
Sample
bcf2ff43266c94c6fb99ee4a7f83e478_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcf2ff43266c94c6fb99ee4a7f83e478_JaffaCakes118
Size
62KB
MD5
bcf2ff43266c94c6fb99ee4a7f83e478
SHA1
4811b012a4a6e87ed8cc90cbcac4037e5192b8fa
SHA256
c02f11674cdec1699250c32cc3c7bfa7ebd428ff75d6e960e386fe7b94850ef9
SHA512
388b8a677dc8f906df1479548d427c191bca7a6c82547946ce54322c8c9d00dbd8aa2fbe4f32b3a6c7b8283f8416c3146b4c8d793d2dcdae1191b839e4795a5f
SSDEEP
1536:mPO6KEVbsVP0gXcNGfuolzdP4d5fL7AIHvUnOMjDUqQ1yTXPC:cMEVbsVc1NGHzKdKIHvUnO2DpQcTXPC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcf2ff43266c94c6fb99ee4a7f83e478_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ