Outt
Sett
Behavioral task
behavioral1
Sample
6f78a4eaef04de3fdd9dfd75d2c5f122_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6f78a4eaef04de3fdd9dfd75d2c5f122_JaffaCakes118
Size
63KB
MD5
6f78a4eaef04de3fdd9dfd75d2c5f122
SHA1
9d3b9143c77af3fd8982694e61de6ec7d5aa5d1f
SHA256
9bea37189b554a9ba15f955a68f1a8681d0ee6e67309bf12003139d3aa93fc5b
SHA512
40e8a9fd5d757cee4778f269717aeefe6750f6c3ea4a14d9480fc888ac6b8c09129d0b5eac5604fab5129eff8d0a8abd41e240153725d2cc3fa781c722feb915
SSDEEP
1536:VZIcCxRrhnf2OkZAPMmE0Bece8sIIADDA3B:r+xhnfv7Jt7IEDeB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f78a4eaef04de3fdd9dfd75d2c5f122_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ