Outt
Sett
Behavioral task
behavioral1
Sample
6f56515e53161cf56886c3f5165c2fef_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6f56515e53161cf56886c3f5165c2fef_JaffaCakes118
Size
79KB
MD5
6f56515e53161cf56886c3f5165c2fef
SHA1
c0e3f9d1d6003bb330f47d8b18ef62d65fd77876
SHA256
7438571fdad36f257ea27f68e8f14b824ed5821597c265e9d2934678875c09ea
SHA512
2525cf8398579f37364dbda36f19f3667e0e2e4e5072d12ef95ef091733f4fca12c70809ef6912e7ca27e2aac83e8286759d1fd3788e03e7d224bbea27a86c55
SSDEEP
1536:ev6hnsInenZO9tgoN3Ib25D4YrLdRnhymM0Gi36aYhJXSUIO/vM0:vnk0tjGYjr5xhXM0Gq6aAJXShO/R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f56515e53161cf56886c3f5165c2fef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ