Outt
Sett
Behavioral task
behavioral1
Sample
6af0d5ca931e2450ecd52066fcc4856c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6af0d5ca931e2450ecd52066fcc4856c_JaffaCakes118
Size
55KB
MD5
6af0d5ca931e2450ecd52066fcc4856c
SHA1
114bfa3fd64581483037162765d43d9178ca59f9
SHA256
4442bfa5fb13a5fc7d96484b2b664501d86fa71d50ec6e0f2a13a6df8875469c
SHA512
5e14f9a8675f112985784cc9ec2df3a4d205ecf48c420ea03766ed8a64f93e7fbbe9e6020b94c42e5602d8ad15d78d101d42e2ea416f640ba41ec8c804b8438a
SSDEEP
768:h8WTpVT0X8zblJ2vegGQoRmx3cDEFt1MPzbcLvxcjBXBHq1KKoVq+Ai4f:RVn2xoRmxsQFt1GzbEcdX5q1KKoQN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6af0d5ca931e2450ecd52066fcc4856c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ