Outt
Sett
Behavioral task
behavioral1
Sample
6a27740161b7ccac415487fe4bd87670_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a27740161b7ccac415487fe4bd87670_JaffaCakes118
Size
46KB
MD5
6a27740161b7ccac415487fe4bd87670
SHA1
d6d8adf97fca02efb6e448cce4f0b294605542c0
SHA256
23b60444cb1a61412f3a61b3b15e1ca31a90afcaba3f7784eb680235dba82a7d
SHA512
a26970008a4e2e48e701ff86d1134e0f80b18e19d25f7953da0aea1887424bcc05c7a4a60dba184626a8ae7b3719c2ce3d20ebef2f4a8ad7d7b31dec27a9ec38
SSDEEP
768:A6rIqUN7OdMEGgO6T7EZFo5z4GJqQmjWfL3l6GWChESFQl43RtP6qeuJoD1:APqmOCbgNTY6qGoQ17l61O5F/bP6U4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a27740161b7ccac415487fe4bd87670_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ