Outt
Sett
Behavioral task
behavioral1
Sample
69b6cba061b2e9d88bd3511ec2c70647_JaffaCakes118.dll
Resource
win7-20240708-en
Target
69b6cba061b2e9d88bd3511ec2c70647_JaffaCakes118
Size
73KB
MD5
69b6cba061b2e9d88bd3511ec2c70647
SHA1
f09c87d2aa801d39e7b56adcdda4965fd4a0f1dc
SHA256
41208b206be115a79277f9799341fbfd23f2285c147d3adca6fe60f12ab06f3d
SHA512
c6017a911b7d5143918e4d08d7b6e5d63ea40c06c31a6d3959e66e9b9d2a448718f530221e1361d66e16b587a77bea6b8276df237456ca8ffe7e5aade3f3797a
SSDEEP
1536:yl3E0THHFwhe6VQ08QaN5HMwNo+abejwAX4NW:E39rHyvW0ZMJMw4bWwAINW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69b6cba061b2e9d88bd3511ec2c70647_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ