Outt
Sett
Behavioral task
behavioral1
Sample
6867179c6257060bc6f5bdc180cbb70e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6867179c6257060bc6f5bdc180cbb70e_JaffaCakes118
Size
67KB
MD5
6867179c6257060bc6f5bdc180cbb70e
SHA1
100557c72a69a8547972f6942cf95c228a65ecee
SHA256
0387828139c1f8d00f90bf7a23952d407f99298e1c904ed4a322f8ec3f65ffc5
SHA512
e2c9c5921acc18d26a48fc0f334b64f553122fed41235c55641e5da941cdd9095829f731d3cd1c02859992cbc6d9df33a341970f7527a3e216ab53fdf79904b3
SSDEEP
768:h8WTpVT0X8zbNReSdmKHT3HimBU6N6IpWsJid0PnWks7nOoyka5mq2BFPOJapzYf:RVlcKSiU6NhpWswGWO7mRuAcVTT/Gg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6867179c6257060bc6f5bdc180cbb70e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ