Outt
Sett
Behavioral task
behavioral1
Sample
bdc235ff224e081deff4300ba076180c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bdc235ff224e081deff4300ba076180c_JaffaCakes118
Size
49KB
MD5
bdc235ff224e081deff4300ba076180c
SHA1
042cb068d739d1a02961129d9002c6c15713bdf2
SHA256
cc5424c933d67c629c2034e9862558b143af6450f6599736fae45376e4b186b8
SHA512
cf5cf552d1d6d16cdb50c6650c0ef40db80cee6cf776377787f30a499497652379804d3ec6ec61baab3c63fa49f0cb77f8540b7fc4c05b423f963d1244379931
SSDEEP
768:h8WTpVT0X8zbcKibrLW4dGPXrb7n+Im/QO15zgblrQt7SGaXjBOCwnk8bISWSKG:RV5ibr/GvHD+J/QOX8JrG7SNdwnMFS3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc235ff224e081deff4300ba076180c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ