Outt
Sett
Behavioral task
behavioral1
Sample
6ac1ad18a2f402b843d242fb9f19491d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6ac1ad18a2f402b843d242fb9f19491d_JaffaCakes118
Size
74KB
MD5
6ac1ad18a2f402b843d242fb9f19491d
SHA1
10d14a2ab9a5935049dedfb9f9f3b501a23c554b
SHA256
968afb3a053621c03ec125d80f124ed0a9939c0657a21b91e7b64bbc9ac03a3f
SHA512
070bd9f83d82495860eefdabf8e55e209ae264895f9ed262860e6250f032f51320da3489ff281bbdeace1297de45aa2fd7a2c615e3d557b7f0043f108f106652
SSDEEP
1536:4sKXEL6mrcoiraUitiFy0HPGxHLdFlPP0bPh:NT6mtiraZtUHABrX0bPh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ac1ad18a2f402b843d242fb9f19491d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ