Outt
Sett
Behavioral task
behavioral1
Sample
6a30d340cb64d4a2048c8abc4859e7b6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6a30d340cb64d4a2048c8abc4859e7b6_JaffaCakes118
Size
51KB
MD5
6a30d340cb64d4a2048c8abc4859e7b6
SHA1
ec200fa3f743c8d815fd68e91544548d351a8a37
SHA256
1d29502e7081d7cc437efe3a529f5f2820b3bd25e366e9368068025b2ded095a
SHA512
96da8b8c2eb2ec0aca56aaf3c544496ef78740dcc9864dd2e9641f9a190485c32c7537baec15462b1372ebeab1a0e03ed59c3baddad7a41c33c5c4d0000debea
SSDEEP
1536:GQ3tfgXKWJfGMzjohtybiMy6Rn1KoJ4jTJ7p:VfgXKwfhj2AFfnVW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a30d340cb64d4a2048c8abc4859e7b6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ