Outt
Sett
Behavioral task
behavioral1
Sample
6959a1dff2da16fb7cbc67bcfc92f10b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6959a1dff2da16fb7cbc67bcfc92f10b_JaffaCakes118
Size
75KB
MD5
6959a1dff2da16fb7cbc67bcfc92f10b
SHA1
7454152168304154a1c67147c600b15046981493
SHA256
7d46934aaaecb39cc33f643475858bbf07ded263a9db3355e82e142c09409076
SHA512
5857937c43cbdcc5c397a1a845fdbf77db566fdaab4249710825f38f4671210a05ed488b65b6bbf9db8f1c62c979d8808411ac9b1122d95c81f92d1530386d12
SSDEEP
1536:yl3E0TXHQpdxsdLqIdAY9rCyT4F5QV4zcAO+PbI/iPu8B:E39rQpYHCY92q4zQO+OuE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6959a1dff2da16fb7cbc67bcfc92f10b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ