Outt
Sett
Behavioral task
behavioral1
Sample
6ab0e34bfbfe681391489a6c4b6aa43f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6ab0e34bfbfe681391489a6c4b6aa43f_JaffaCakes118
Size
51KB
MD5
6ab0e34bfbfe681391489a6c4b6aa43f
SHA1
2c67ed5b3d43be541668e8d35862f2c9a2862615
SHA256
ba583b151e8072e58d00fbe287cd308713cef2e9b67780a5ff3fc1def0f94f3e
SHA512
d749b9752ba9dfd89971929d041251c34d171d8ae3e8421042f30935596b312bc249191f2a15d79d6815ee1ecb22a225ff54080c396cd48baaa409c081c37d43
SSDEEP
768:1zExMf4sJGHw2jnIsljwQbWUOGqzA0nbHs2X2v70KHNCXuRJuYyuz/:1zExMwCGQ2jtRnbozb9XxWNCXur2k
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ab0e34bfbfe681391489a6c4b6aa43f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ