Outt
Sett
Behavioral task
behavioral1
Sample
6adc1c62f19accfe737ed65059d6e30f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6adc1c62f19accfe737ed65059d6e30f_JaffaCakes118
Size
56KB
MD5
6adc1c62f19accfe737ed65059d6e30f
SHA1
94f5340d9254365c25e9770313f833952bba7f67
SHA256
2d007cd5849dcdbfe3eb02aef0f807da36665e499630ee91b9dfee89f7c0811a
SHA512
5cae6743ba859bc3574618fb5cdc13c7a737fbec05f114fff460891c9ac40fa4df383d8f7c53e6e52466f74e4ab7e7fd2cce7fae3ad5e8d4985efcb2d06df817
SSDEEP
1536:tpAmLSVcFIL2OyLWun7KYagcnQyz89o3rCQiZT:AmLSVcuSFLWw7KY8nQyz89o3rCQg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6adc1c62f19accfe737ed65059d6e30f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ