Outt
Sett
Behavioral task
behavioral1
Sample
6a46b4de18e7c4a435e6740ca76ee01e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a46b4de18e7c4a435e6740ca76ee01e_JaffaCakes118
Size
62KB
MD5
6a46b4de18e7c4a435e6740ca76ee01e
SHA1
4cbf2bd94f287f935f610fbf40fd4cab5245b8f9
SHA256
6990058122d30ac0321b688019340a0289ed53b0a852a8c0e49d4f74204f8e0a
SHA512
9ca45d5c2a33d029ed62fe2975e8eb12a210431dcf36f2cfba71627b817379a76f44e0c6591a2fef2b0a839056f81d43c911984194c869f93be125d68be8f35f
SSDEEP
1536:evAV9JGXXs/WcDYc0gyFQEtL9R2jJDaMvd3lruquFW:xV9J1Yy7EgjPFAquE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a46b4de18e7c4a435e6740ca76ee01e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ