Outt
Sett
Behavioral task
behavioral1
Sample
6aacb6b4b8ca7fe4c24da6b0308f4db6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6aacb6b4b8ca7fe4c24da6b0308f4db6_JaffaCakes118
Size
63KB
MD5
6aacb6b4b8ca7fe4c24da6b0308f4db6
SHA1
323ba2c34e6f346f2ec30979a0cf6cd0cbf771c8
SHA256
cfa7ae848f30231549fbf4ac58b920326914f006f451579f1c92483bc101adfb
SHA512
ef9e41d3b15fdfc9c475017747bd5d9f8fe2c015237a366ce4c33626563abda079ee4e0798e7125964691240294baa08bf6050430331c9523faa7f9880443cab
SSDEEP
1536:EGT/wf3pl+Z+s0Blpxl0d6vALnv4W6hQegwpLppvwhg:EGe3plC0BlDl0QvWv4yegWHwW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6aacb6b4b8ca7fe4c24da6b0308f4db6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ