Outt
Sett
Behavioral task
behavioral1
Sample
6ae805802331824d48929f1113648320_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ae805802331824d48929f1113648320_JaffaCakes118
Size
69KB
MD5
6ae805802331824d48929f1113648320
SHA1
2ddd1355439912dd4e394b06cf730e50e06c6074
SHA256
2f87857f4fff218516b0c04d1bcb5ab6e31d4121f151abac2d0fbf878164b3e7
SHA512
0785108f701496f664def8447f6757a4322ce132750bb8f53e4e5dce94327efcfcde5b7406591afbadf8d11b94a86c32996b18790e2d5de3f0c9319c45ce3f1c
SSDEEP
1536:Bm1NGJVG5t9xK6xlRmGu5jggKyKRmrtw4IGka+b1iJ8K8OscrgH:kX0VwxK6rR3uSgkR/47+ctN9S
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ae805802331824d48929f1113648320_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ