Outt
Sett
Behavioral task
behavioral1
Sample
6817dca7897844571e5099ab9b1979ea_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6817dca7897844571e5099ab9b1979ea_JaffaCakes118
Size
72KB
MD5
6817dca7897844571e5099ab9b1979ea
SHA1
df282f1669a35cd3cdbb31e87ad4bdda47a7f126
SHA256
cc5c73eac960e4c1b9bc854cb6474d8fe70aab7d41a6fa9fa48e9f27083776f9
SHA512
ec60347861e6d04c1606a219fd92e93ef8f99946bbaebabd78346c2d06f8c885643e4b448c64eb853ac0a031caf0725bc77861e5cb355b1601b3429406ffd580
SSDEEP
1536:1zExMwCGQ2jQrnjudIRnzynC6BJyS7CTk5dRQxVNmnOqyIfi:1I+wCGvMnjBnGnC6B97CTk5dGVmnSSi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6817dca7897844571e5099ab9b1979ea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ