Outt
Sett
Behavioral task
behavioral1
Sample
6a73515f6a1bb2d93f7452fefbfe4134_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a73515f6a1bb2d93f7452fefbfe4134_JaffaCakes118
Size
72KB
MD5
6a73515f6a1bb2d93f7452fefbfe4134
SHA1
df5395253a40ab5e8fd6ce9e90cfe9346f513b84
SHA256
6d2f07515f69efd8465cc4802393d99d44e19b3884e2d1c7fed0f77268350c68
SHA512
3f5fdb0c13e18bf402675286e1e4753f8712260d02e66b6789adc232a9f48173c99b270cd0413df5ec08e64cabfdad37f48abc1c8dbbd12b20042dbdc2a5b2eb
SSDEEP
1536:1zExMwCGQ2jDx+qE3uJcSFpEDC1KrMULCJdaGfuocDDclI3qCC2d1fe3WD:1I+wCGvp+qXcaE6bJMSurnqI3qn2fGg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a73515f6a1bb2d93f7452fefbfe4134_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ