Outt
Sett
Behavioral task
behavioral1
Sample
6844674b83e98a52c7f8a252c1edb23a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6844674b83e98a52c7f8a252c1edb23a_JaffaCakes118
Size
63KB
MD5
6844674b83e98a52c7f8a252c1edb23a
SHA1
4e2c67eaf7b39daec042b06fca4e6af5dd9965cd
SHA256
15a8b04a4f75ccaf5e40c37f78eff64ee4375289675b182f30fd9185881802d2
SHA512
4ad20017c555464df660e5e55caf31c77aed826f93f424499c3289490ac2d474d15d7860b47a4f5deb726105d695948342db8e081b9ad9fe5e6f32046d2f4c0e
SSDEEP
1536:yl3E0TBTjFA7VVwNlqy063tsj+pKG58oQmHYkV:E39O7ANZ3W+pK08oQza
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6844674b83e98a52c7f8a252c1edb23a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ