Outt
Sett
Behavioral task
behavioral1
Sample
6ad22a30ea00ec3c31dbcb1d47237ae2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6ad22a30ea00ec3c31dbcb1d47237ae2_JaffaCakes118
Size
54KB
MD5
6ad22a30ea00ec3c31dbcb1d47237ae2
SHA1
28a3c072d4a755eca55ed71f7c4f13cb4e765d82
SHA256
c762e7e02df5516c508c1098ec6759d6df9dc3a88e348d40b60ef47aa2b4f7d1
SHA512
e50854786dbfbf0b7b69bde56e964217cf5c3c8fba3f1b3bf2af094508bb3922915e12ded21242baaf35be7fb22276b9568db3a5ca4ff40a31ad406b80fdabb6
SSDEEP
1536:mPO6KEVbsVP0gKtqemVDVTVhcvLK0AxTa8CgAp0boR1:cMEVbsVc/qemVDxqVST6g2l
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ad22a30ea00ec3c31dbcb1d47237ae2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ