Outt
Sett
Behavioral task
behavioral1
Sample
6881d8067b7a02d7a4d258793f81bdcc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6881d8067b7a02d7a4d258793f81bdcc_JaffaCakes118
Size
68KB
MD5
6881d8067b7a02d7a4d258793f81bdcc
SHA1
c8cf0fa0d6a6f46d70bb0358e8514f7eeab6e18b
SHA256
6ba45c22792d7c0beb4d7f281cff01a81cb56bf33131974450b7b88f61f8dd34
SHA512
5affacf55263eaf714506e03dbb254cb7397b27f9cbc9e557c3210bd973529b12c54c8ed1207286d95d45b01dfabceb8871b6613a6fc165cac0bdbf6830b70e7
SSDEEP
768:qz6nzm1b5gNZLLrs3youvfY2PyQiOvnDUMh0kbwCW3jUsFT7lxnLlo526j97oU5P:qmmMjvkQ/v0ksdFJw26jCUl8wU3A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6881d8067b7a02d7a4d258793f81bdcc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ