Outt
Sett
Behavioral task
behavioral1
Sample
6919d2a97b94414568271b968b8826f6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6919d2a97b94414568271b968b8826f6_JaffaCakes118
Size
55KB
MD5
6919d2a97b94414568271b968b8826f6
SHA1
0529e461d6dfd1235a85fcbcd4194cc71782eb98
SHA256
b75fd3a39ee6d60f470fd1c65f21ace4ef36994a8f49cfc6c9ecc6c01ceb4373
SHA512
23d3cf71cdafbb6c8d264b8b987fe8dd74aa1ff0b3940dafba1c0ae52d9cde2b0e005499039e353a640acecc60a033b4beaaacb554ebee760c7c0b6308e0f1b4
SSDEEP
1536:V2bb542iNoy8Xz+45WJkT6jC/1eWAjGu7kOZV:Wb5Coy8jB5WJ5jC/1Ib7nZV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6919d2a97b94414568271b968b8826f6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ