Outt
Sett
Behavioral task
behavioral1
Sample
6aad82e5f0104aba63866fe17e7d9b49_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6aad82e5f0104aba63866fe17e7d9b49_JaffaCakes118
Size
64KB
MD5
6aad82e5f0104aba63866fe17e7d9b49
SHA1
06a2e74126e7d6a5ecbb47779e38a105076a8b54
SHA256
9f8a1d02ce5c8614e4cfbfed5fc3156405be372b7806a64b60e2bc0f76aa39d7
SHA512
77fbc88efcf1e3f62a5be91ecb2805e1bc8c26ef91097241e3cbb61a4c1bcd40c99b99c66842bff7b19ea8eba5025761df9c07ed3d7a4a0f6a18df6bad5f1a37
SSDEEP
1536:Bm1NGJVGHF3n+rW+AubxBFGFqFKiPhpqXcrX:kX0VOfCyX0/acz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6aad82e5f0104aba63866fe17e7d9b49_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ