Outt
Sett
Behavioral task
behavioral1
Sample
bdc1fb2ca60395fc9e8de53cbc40035c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bdc1fb2ca60395fc9e8de53cbc40035c_JaffaCakes118
Size
70KB
MD5
bdc1fb2ca60395fc9e8de53cbc40035c
SHA1
43adfc2d82dc885a95fb48c3dbd538f8445c05c2
SHA256
86eee393b7d9cd5bc203acffa18b702e8e0b5a73293f287e99b32140a44d0960
SHA512
56f4b0b2fef6b192f51659ddaa3cbf0817366143dc0c09234a21e170e5b5d958d708bebed9c0e7002f1921bf07e264610258c4bf4ae5734d0bb87fc395f5db4d
SSDEEP
1536:RVdqK/hw+Md/X28sajGae2HTUZR2mkVTyWU6Xk+BtXk:TL/SfcJavzJVytGXBtXk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdc1fb2ca60395fc9e8de53cbc40035c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ