Outt
Sett
Behavioral task
behavioral1
Sample
6ae026f64ec32245b1e3db6b62379594_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ae026f64ec32245b1e3db6b62379594_JaffaCakes118
Size
55KB
MD5
6ae026f64ec32245b1e3db6b62379594
SHA1
769b0cd19480cd45d6c9a07d3e46aa4023a01f3a
SHA256
1f768a37249fbad8294652c878c6575fc42ad8036c6584502d862a1801efc188
SHA512
851f415bf9a44707d41384db05a1c8965860ea25519838dcf1494c267b5d24f3f12ec4653c94ef5731a13b66cf5a182a71f24b86292e1ea7b120ea9530f06aea
SSDEEP
768:yuUr3ip/IHI7NQTvav5zVIPxAjXoVkxrDVxGI93/inYu8hFo6Tm6DJZ7IdttthqJ:yl3E0TELg04angYbFv66Z20cDs3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ae026f64ec32245b1e3db6b62379594_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ