Outt
Sett
Behavioral task
behavioral1
Sample
bdcfbfa06b1c0efdf56656ef391363ce_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bdcfbfa06b1c0efdf56656ef391363ce_JaffaCakes118
Size
67KB
MD5
bdcfbfa06b1c0efdf56656ef391363ce
SHA1
888f617833d04a70dcfdf040ac1ab77756d13394
SHA256
ce160b743a7f1fc3e6a561b60471bb5639987b9fdff27a222d230a8476eb258f
SHA512
04ae054f9ea8a06ab412bba167a485f1d8af8a7e01d619f20eda652e531cdd5c2d246ecaa9982a2c202ccf01c7f4b77ccb1565bee9c5eda747429e566c6bfc35
SSDEEP
1536:1zExMwCGQ2jlOQEAq2kyBFbfSNuYBrwpAmehDMtIa/ExhamjKvge:1I+wCGvx7I2XwQsxmkYd/ij+p
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdcfbfa06b1c0efdf56656ef391363ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ