Outt
Sett
Behavioral task
behavioral1
Sample
6809cd16f8c8e5cceee9aa03808e810e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6809cd16f8c8e5cceee9aa03808e810e_JaffaCakes118
Size
63KB
MD5
6809cd16f8c8e5cceee9aa03808e810e
SHA1
fbd666b18bbc24ebc45467fc0646d3bdf1c29f4e
SHA256
ff91d7d9a356a2b61a8971721a8c36585d3f946c1ca230422925287b9690a45e
SHA512
955004bdc4e6103a81962dbc5b27c0eedee1f6631adf6ae6750e78a24c888cd945676319720e618979e6cfcfe7092c81c61d63c8c182f8bce786c399cdcf823c
SSDEEP
1536:agF0eiyUcbXmWyg7ZL6Fe0CDWanzK8KUuE6oK:t2yFzmWj6MzDWazdbuE2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6809cd16f8c8e5cceee9aa03808e810e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ