Outt
Sett
Behavioral task
behavioral1
Sample
6a849c3faee6b6d72770b87c561aa705_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6a849c3faee6b6d72770b87c561aa705_JaffaCakes118
Size
47KB
MD5
6a849c3faee6b6d72770b87c561aa705
SHA1
0e383dbd4188735cbb09d61a22e3e333fc34c7b4
SHA256
d2b56e2aeceff92ed0064815ab786dcb354d82f5fde9b715f9de1610782876cb
SHA512
21fe0e4da26bff32b59b9ab50a537b582df41451b5205c971b591a2249f669ec1cefd0d00df0bfda9745bf221d4592f2189ac16e15ff36e170afdf6887f9e6fb
SSDEEP
768:qz6nzm1b5gNZLLrlJJc5LAw7drWh2ZaBx/xo2PbEykSB6QgSQLk06X+gStXJ3xV:qmmMrJULzrWhj7/xo2PPkmQI0sVS5J37
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a849c3faee6b6d72770b87c561aa705_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ