Outt
Sett
Behavioral task
behavioral1
Sample
6a4632fd4b75e7aab1e1510727cc5f58_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a4632fd4b75e7aab1e1510727cc5f58_JaffaCakes118
Size
55KB
MD5
6a4632fd4b75e7aab1e1510727cc5f58
SHA1
38c655742d0b5c6abdbcbb63a573ae6ea5b130bc
SHA256
26d29fd9c5cdabd2aecaf143d726b7d6e6b19cebf8c0c2406171962e32b554e3
SHA512
0a1ea59fd4f1183a5e95f240ac2b693981a2eb6992af317493bd496f99986338414d26f9b6b4db5cbe6e81954e11381c16da613291e246b5baf3cdf4a7df1371
SSDEEP
768:nbY4lajHBj6zwrE3xgnx6+JPh6uEE2/T//7ZbW0sqX1Yg+m71i0z:EGgBRE3Wx6+Fj5OTXI0t2g+Mz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a4632fd4b75e7aab1e1510727cc5f58_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ