Outt
Sett
Behavioral task
behavioral1
Sample
6f1e6c0ee76c603a27d03c8405412a39_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6f1e6c0ee76c603a27d03c8405412a39_JaffaCakes118
Size
69KB
MD5
6f1e6c0ee76c603a27d03c8405412a39
SHA1
5d6e823390848cef32cc1a450b7c84f4650493c8
SHA256
ff6e1683948310fdcbed67acb83474f5c55bdcb1e751c77847d518c4d7f50d5e
SHA512
38cd09c4d4d2ea67580d70437fa5201d73770e4704dd02589c63220884e30bbbb839c2fcb857940940c410a6a647ff2cbf83ca3b49be09c6340a575084e871a4
SSDEEP
768:GbvLDaaMact8TobvdGwCu0pVvFUBya111Q/6Dmy6SP+Bn+ZZiTD/v5m34vJ157UW:evVDuGVOByYlqTn/Rm34h157uV4oIjqe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f1e6c0ee76c603a27d03c8405412a39_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ