Outt
Sett
Behavioral task
behavioral1
Sample
6876a5c9314503e1b8a5f8cbc0570879_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6876a5c9314503e1b8a5f8cbc0570879_JaffaCakes118
Size
59KB
MD5
6876a5c9314503e1b8a5f8cbc0570879
SHA1
c1596307d452e8b14cb48fdc081560a7bdbe812a
SHA256
bb3a26d376e655519628abf011ea3de911806e2245bd0933573ddcc75f984a9f
SHA512
6f34bd93fd1cc1263695b81722e092d37ec09f1f12afb049e4655b6c5e9908cb57f170396590602ca3eae917c6df271661eff5ef00cb775de624aa1ed8067862
SSDEEP
1536:MhBRVgrExucMpqSr+Y9wAFylO3V9hsK9SejKq6dRRM:cRRsuSrfsO3V4K9cPR6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6876a5c9314503e1b8a5f8cbc0570879_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ