Outt
Sett
Behavioral task
behavioral1
Sample
bcf5f4a25c50edc5ec7ba14b051a4246_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcf5f4a25c50edc5ec7ba14b051a4246_JaffaCakes118
Size
57KB
MD5
bcf5f4a25c50edc5ec7ba14b051a4246
SHA1
2ec0c206b652ff4fdc1f5a757ed8be2460c7ef23
SHA256
eabda9b9121a6995c68e3ae22a24664c3817de480e1413f2c32e39b186487d88
SHA512
b64f944e48303c83d1473d25bc9f4c493492ae9dfa0e5a1949369543ddc13c1359e8b502f56dd2379b588b7d6114d2ba54a54528798e50c2a500fd674fe40e96
SSDEEP
768:z3OHS8KOzdFmr9kdsuiTf/zOcqciS/rNN3hjy4VyZGZ/1RFamlolKXiXP:yHZDRdijq3STNN0RkZdRFaGolg4P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcf5f4a25c50edc5ec7ba14b051a4246_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ