Outt
Sett
Behavioral task
behavioral1
Sample
6f69efd546670546b905109f592a6727_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f69efd546670546b905109f592a6727_JaffaCakes118
Size
52KB
MD5
6f69efd546670546b905109f592a6727
SHA1
823ab9c47b575bb0ad3f19156d0faaec05b1d1b4
SHA256
a0d060adc8e583a5dcd2dfea5d603cf2c6a9dc38a27659a975d3de84fe5ef7b5
SHA512
b16e165c52468c8961c1df7ce42c6cde780e0f773f4cebe92d8a0360006970322acf1e679ad4b8c5cd38d0b2e0e4a0846ed3a410758b887ffcef68818c8a9d9f
SSDEEP
768:yuUr3ip/IHI7NQTvaxZO+De+bw5EcnN/EY5X+uEz6QN5ZfzzclDtnj3xbt:yl3E0TYZOZ+s5Eo/5ubN5RzclDJjBbt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f69efd546670546b905109f592a6727_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ