Outt
Sett
Behavioral task
behavioral1
Sample
bfc52ba6712c471a7f6d854561b3c7f2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bfc52ba6712c471a7f6d854561b3c7f2_JaffaCakes118
Size
64KB
MD5
bfc52ba6712c471a7f6d854561b3c7f2
SHA1
706dd55460f8f17eb3cba91fb9f4a394faf29782
SHA256
bea9048cff5e19fc8be9bde55be89609c64e668633b963035d82a9719a419e27
SHA512
5d461054a2155aee9a4570ad848613dce51c5576650c0b544f85394b7874a0fbf5792308360a480f6128e6084f9946716dbf79f9f8bb6bf15f5b1c61718d8606
SSDEEP
1536:Bm1NGJVGV4s5r6CZhZPpj++HpRXoP+Ixy+SOqHJw:kX0VLGrNJl+ApRXoPxy+f0w
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfc52ba6712c471a7f6d854561b3c7f2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ