Outt
Sett
Behavioral task
behavioral1
Sample
bdc0808708e409108a4ca68ddfba6c77_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bdc0808708e409108a4ca68ddfba6c77_JaffaCakes118
Size
74KB
MD5
bdc0808708e409108a4ca68ddfba6c77
SHA1
804c9a6d975b731b0b33df0443731d0413f07812
SHA256
839594bccc3b6aee508545f3a563ad123def14f7b44c5b198b322b387617db8c
SHA512
07c7408f9bc8688074243a2d52bb6946a1f25858df528b16864661e353aca6d184ebf343b67e1847a55cb0a14ea14e580cf5b32cd53cf49031b395986ba8fe52
SSDEEP
1536:1zExMwCGQ2jQvUk5tAdOehDyDhHn29y4sHU25N6COky5jW8HOlbY1Rt:1I+wCGviUOtA7U92DONWW8HOlit
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc0808708e409108a4ca68ddfba6c77_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ