Outt
Sett
Behavioral task
behavioral1
Sample
bcff26824b96a8929fc9ad15fd8ff2b9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcff26824b96a8929fc9ad15fd8ff2b9_JaffaCakes118
Size
68KB
MD5
bcff26824b96a8929fc9ad15fd8ff2b9
SHA1
7a2bd1e4dd663ac4c8b5319f9260b72f2b3a8f34
SHA256
00ce74a81564abacab26e313130fffe2304f44520f1258935fb5ec147c1336d3
SHA512
37e9d2fcad6bddcfe94715ea99249a2f45e7067a68afcc39138d60289d645839e5df8f90a31f0ffab9ba0f3a01ad1ebd7dd895aff4c0dd765b57253ce81998bf
SSDEEP
1536:V2blg5/5wREOVH+lWITCKU9hmYyNnzVO7Wf1Dv4TF:Wlg18VH+o8hU9mNnGWNaF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcff26824b96a8929fc9ad15fd8ff2b9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ