Outt
Sett
Behavioral task
behavioral1
Sample
6a1a86592fbbb4ebba58850be4ea367d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a1a86592fbbb4ebba58850be4ea367d_JaffaCakes118
Size
64KB
MD5
6a1a86592fbbb4ebba58850be4ea367d
SHA1
1a2bd1d86f09dd8062d55ba2e4402f66f3594ec6
SHA256
b45c907dbf1fc137786f330819907be8cec71482d317b320ba765f146768ecde
SHA512
4593a3480c79148a0e955488c08ac2219c1033ee3cafa37dbe5568460be2b3b63062b59140438c39dba7ed2aac2ee2503f0a89f23658d7814a8e62e498d50efa
SSDEEP
1536:9nOsh45xOvJFeqbuI+MRrY5wx4XX6B38cAnmn:AjOfuARrKRE38cA+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a1a86592fbbb4ebba58850be4ea367d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ