Outt
Sett
Behavioral task
behavioral1
Sample
bec15a49087330f68b4425e582077171_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bec15a49087330f68b4425e582077171_JaffaCakes118
Size
69KB
MD5
bec15a49087330f68b4425e582077171
SHA1
1af10a3a1f2ae111bf24c9b5a7d5b8b6fa87af38
SHA256
32de8b0fd8279736bf05ddfdea523b82d8d3e705a2e3ce1c8bf18bf49fea33b2
SHA512
99e104a2be9de63ff093393db5beea57fec77ecb9782e3023987150324efd34aa97a7c851adbcaa20b6748f72a02aad68d470357fdeca7113e22ec88b9c0e4db
SSDEEP
1536:1zExMwCGQ2jF+FYaUDdsYEJmG4QLn0nMecQLPfnLmS5+mFAsQLatUE:1I+wCGvxzr5sX4QLn0nVcQriK+mFAsVR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bec15a49087330f68b4425e582077171_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ