Outt
Sett
Behavioral task
behavioral1
Sample
6a2ecb603765c9ba668725961f41db04_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6a2ecb603765c9ba668725961f41db04_JaffaCakes118
Size
59KB
MD5
6a2ecb603765c9ba668725961f41db04
SHA1
d79a374042e3ca8b6be0ba5aaca2398a9885b271
SHA256
332e6a44921dd58d20ca57de60962385b5b6539ae32ddcbf78a874ac1555edea
SHA512
d2d8d12b780eb4e290d56aa6419c904c36444a5db208b3860ff59385670a5cd9234ddf37336b933e29ab598e42edff0b68aa0f8443f82526ae829ea5b31bfafb
SSDEEP
1536:4xFcH1W3/jnSbZeqV8posWjDiAo9ZC0I91:YQWPLwbV8po4p9ZCd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a2ecb603765c9ba668725961f41db04_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ