Outt
Sett
Behavioral task
behavioral1
Sample
6a27439bbe262dc430940dd995d04fd6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6a27439bbe262dc430940dd995d04fd6_JaffaCakes118
Size
62KB
MD5
6a27439bbe262dc430940dd995d04fd6
SHA1
968fd1cee8dff3f7d2fabdfbd7294cc35b682f79
SHA256
1d76c9927b098c192848001a55515786bdb366ddcf523d59214aaad52a76ad5a
SHA512
d51bd1b4c75b7bc1d6d9a368872b391af3d0050aab6e884957b4ce27df03e3d1dfef83bb8a51cf2474eb6314d0967973d2fd9fd24f5d95f53b4292d460e5e324
SSDEEP
1536:1zExMwCGQ2jyrPS7xUU6WKImAay7hN5vT/JumU2BZvT2iA:1I+wCGvIPSE9ImAJFNB/JuT2BtbA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a27439bbe262dc430940dd995d04fd6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ