Outt
Sett
Behavioral task
behavioral1
Sample
6aeb7d462edc6c2998e9bd6682297bbe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6aeb7d462edc6c2998e9bd6682297bbe_JaffaCakes118
Size
66KB
MD5
6aeb7d462edc6c2998e9bd6682297bbe
SHA1
b2e5cdf792880c11c12b0d10ec3efe9c4972ba66
SHA256
7a0827739d1eaa0f0fcdb5bbb226486f13f32f437d7a6e6900efb48c8fe69a8f
SHA512
3c40a6ceac688d78faed017755aac13936212bf990027c1b9b1aaba94855674a7cce8b9b8185b925a521296bbf9799e91897179003eb115ff4add7f523fb8a54
SSDEEP
1536:jZIcCxRlFCGuCLX8Yfa2iVi8XwWL6DRGx8YBIJrM:x+bEONfaxXwo6dO8/2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6aeb7d462edc6c2998e9bd6682297bbe_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ