Outt
Sett
Behavioral task
behavioral1
Sample
6ac6a5697f143d6b4c3b546971c2c30b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ac6a5697f143d6b4c3b546971c2c30b_JaffaCakes118
Size
68KB
MD5
6ac6a5697f143d6b4c3b546971c2c30b
SHA1
7efd3ba93ea7b2f9322493e53f6163f6a0c247dd
SHA256
212bb8b22fc8851e015cdea3b904339dd6d88699a15ae3d2fa030d5c3bebdf51
SHA512
a0915457bfcc1cd73bc6db71717a49de724d01ecf46468a84473acc929edf656650899eae925d1de56516e7b31e14bc3155a17d7e5d219e8631818d9e1ec1886
SSDEEP
1536:yl3E0T5s0yeMMMlZ2Xw7vHSyiyOK5i2rt2lGwRK3F:E3964cyw7vHSyiS42B2EqqF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ac6a5697f143d6b4c3b546971c2c30b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ