Outt
Sett
Behavioral task
behavioral1
Sample
6afe0d3db85dfd38a36bcc29be1a48cb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6afe0d3db85dfd38a36bcc29be1a48cb_JaffaCakes118
Size
57KB
MD5
6afe0d3db85dfd38a36bcc29be1a48cb
SHA1
1b07a0c032d29260189264ecb84c8a46c2d5b5a4
SHA256
572849d6b498ea5b7a7a1a23c2403672a9d1e6b5ff81fb6b70b1c982d78e9f76
SHA512
fde4db0b43911ec23cf4463b7ab46d03f6817f675bba598132e1f303eab1032792ca7c2b640cfdbfb16342d4dac549dc47b54c1277243adfc89469b6c3988dc8
SSDEEP
1536:RVLlwhgR2jFwMEjWQaqVX5AcARng6GjagqKnzsgVJT7tP8EJ:T52xbQaqVWtRng6ea8nw+J/tP8EJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6afe0d3db85dfd38a36bcc29be1a48cb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ