Outt
Sett
Behavioral task
behavioral1
Sample
6a4b34fa41b43a2b8768230a9e5444f1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a4b34fa41b43a2b8768230a9e5444f1_JaffaCakes118
Size
41KB
MD5
6a4b34fa41b43a2b8768230a9e5444f1
SHA1
39f484984b3c5dbdcccb565be738175d123cf6af
SHA256
6af5f93bd7b82207811d3d3455669455d4c12630f3b1f23dd1abbf6e35c9e470
SHA512
630868558cfa3d13fd7ec7b398de9c3e3dcb534fe96f33c4f32a1807520dd899b6ad17d3d8781f00a7607fbfba3086c2a78f6d2a92df634efbe7a010ce683225
SSDEEP
768:V8Ohft9pnjz0bRjW49ikJoeMcNaCX6sMqu4XFhPbQoe/LJE0HBNjGY2YkkZb3:V8O9Nn6RjrikFDNaCXrMqRXFrezJE0n/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a4b34fa41b43a2b8768230a9e5444f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ