Outt
Sett
Behavioral task
behavioral1
Sample
bcf7dffc8790e355f09870d6166cc48f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcf7dffc8790e355f09870d6166cc48f_JaffaCakes118
Size
64KB
MD5
bcf7dffc8790e355f09870d6166cc48f
SHA1
9bf3ba0ee22abfd3a2864804f312745ffa7f222a
SHA256
33b3b6a5ea50514484ae0328521f18834cd8f3269dcd04253094f4003d57b5a8
SHA512
35fb7acbb7ea65e2c1061241fc68a9d34c71205fe6f8df893e95af309b4c526a0bf62e138971a03039abde99c5f9073ef87c28bef9d3ac807660bea379561c38
SSDEEP
1536:EGPSKm5kugx6yCJCI8/7TDkUr68h2bwnWfp/nlsy:EGKjgfIYDkq6CqwnWfl2y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcf7dffc8790e355f09870d6166cc48f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ