Outt
Sett
Behavioral task
behavioral1
Sample
6efbbdc2f4d446ee862dc3090188c21c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6efbbdc2f4d446ee862dc3090188c21c_JaffaCakes118
Size
64KB
MD5
6efbbdc2f4d446ee862dc3090188c21c
SHA1
eb633a14c60c281ac854c86b456c9112d715de75
SHA256
6983e1de2ddc2119b6b99e375d43d7a9e7acc97efc04a797918b924bee9b628c
SHA512
d6bcc8c094b77b2f39ffb3adce66d271d4530136cd7f445df2025982af17dad9edead543d51b1d09fcc36cfcffd70fe593819340701522eedf117bafeb539ec4
SSDEEP
1536:1zExMwCGQ2jVZp1A/CJcjnAOYGBdNR227FTRBGtU:1I+wCGvt1A/ljAOt4mdYtU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6efbbdc2f4d446ee862dc3090188c21c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ