Outt
Sett
Behavioral task
behavioral1
Sample
6884ef945d3b294fb957ad662221ee41_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6884ef945d3b294fb957ad662221ee41_JaffaCakes118
Size
64KB
MD5
6884ef945d3b294fb957ad662221ee41
SHA1
dd5933c27d057f28bd7e1557d5f4baa2ff4f08a4
SHA256
475d781d14b1b4732576ff03e47241aecb5d71a08e31d51a17ef12842e2bf2a1
SHA512
2635e989efed83612b9f76457b6066c45ed12b2bb8bef0c36d0c18421961c1d84c7ee9b1244a78cb0cc62c5ef52f73a50dcfeb194bc8bb14922373f4aa584691
SSDEEP
1536:GQ3tfgXKBTotMxSU+VwRwQ3DioKsu4OSKNgyPv0AqUc:VfgXKBUtfGT3D4slOJgmJq/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6884ef945d3b294fb957ad662221ee41_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ