Outt
Sett
Behavioral task
behavioral1
Sample
6ab877fd57abcd0138fd515c6802b7b7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ab877fd57abcd0138fd515c6802b7b7_JaffaCakes118
Size
85KB
MD5
6ab877fd57abcd0138fd515c6802b7b7
SHA1
aa53b9ade93733acf8d225245791a6d0373d880c
SHA256
198429bfae0a8f3da639b235d4a7194bc87fee8a52c42500f63c3ddecb04d289
SHA512
ec59e3e664d25b2a96aa60e485320c5ef6bf1d88c4fc3f54b075e07cdf967f85eaab8eabd75456bd357d96d1065b6468585dfc0c6c588caae7dd4cf7f52c0c6f
SSDEEP
1536:1zExMwCGQ2jgcR0x1w5fmv0bRr88maYGHczPIq8HX9/SbKoYh5ZrMUR0JB/7:1I+wCGvMog+fmw8na7HcUq8Ha5YVV0Jt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ab877fd57abcd0138fd515c6802b7b7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ