Outt
Sett
Behavioral task
behavioral1
Sample
bdc23115bf3ab25b77cce0b6c2f6bf69_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bdc23115bf3ab25b77cce0b6c2f6bf69_JaffaCakes118
Size
57KB
MD5
bdc23115bf3ab25b77cce0b6c2f6bf69
SHA1
cd9a9a7da93003fc56ae4bce6f56ad9b303dd6db
SHA256
c10310deeb8fb9a4c26499836db2007e436c476ad2dd6e3b9ef63c83de0e8a03
SHA512
36c3b294d7859ffa6ef1f9ba4663e67353847ea5cb0fb6f4f46a3fedf26880d54007dc4d712db448d7182b168046ba68ab659c841bed64b0510d21657641fbeb
SSDEEP
768:1zExMf4sJGHw2jnwEnGUMi5fiG5xCWkqA50aYddYI4acAakcGd55r5:1zExMwCGQ2jwDUXVk/50aYdre0d5P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc23115bf3ab25b77cce0b6c2f6bf69_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ