Outt
Sett
Behavioral task
behavioral1
Sample
6ac3fc8c1422624073a8e0018bd0e186_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ac3fc8c1422624073a8e0018bd0e186_JaffaCakes118
Size
65KB
MD5
6ac3fc8c1422624073a8e0018bd0e186
SHA1
66fdab564d411f55db223c5309836bf4cf677d56
SHA256
9bb06ce326fbddffe151a8a1e3965ac788dec920ef86764f0992580df150cbd3
SHA512
7aa25bca9c997842493edc30f3c7fb3972c4bfd5e4f5670092ca488c88747341a78488db1678b6745ffdde0f1e063e748d2aa05c9734d0e83e9cefae6fac0c3c
SSDEEP
1536:V8O9Nn6RjriVq8zs5Q2FtnTvx9C34hXFn6D9srvTCcG3:2Oz6VWVq8zsq+Goh1n6WfTG3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ac3fc8c1422624073a8e0018bd0e186_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ