Outt
Sett
Behavioral task
behavioral1
Sample
6a183afb1bc474b317c8a397dd5e38cf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6a183afb1bc474b317c8a397dd5e38cf_JaffaCakes118
Size
68KB
MD5
6a183afb1bc474b317c8a397dd5e38cf
SHA1
1f5d3b1aecfb141882a8192af593d45952559ba1
SHA256
d3508255bfdb3a17720010a7763db31408891229511488d86b639af7d4b86fd7
SHA512
b575deaf93162d995d578e7ba0ac34cd09b1f927f95d66046aed5999ade6d76f664398db1ce15d238c8e24d9383560d1aee5b75d736ffb9534dc1b15717cd57d
SSDEEP
1536:EG/8y9+1SPbqyhpOPi24HW2cJOtSpQzhaw39PfV82SnVudQGoEt9:EGES1vOg8ezhn982aud1oEt9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a183afb1bc474b317c8a397dd5e38cf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ