Outt
Sett
Behavioral task
behavioral1
Sample
6f7062e3a422c214ffad42b46f23dbbc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f7062e3a422c214ffad42b46f23dbbc_JaffaCakes118
Size
77KB
MD5
6f7062e3a422c214ffad42b46f23dbbc
SHA1
9ff8138c06e7a5858776d70f3feb8d756e239042
SHA256
2b743d53f8735dd13abf8a9b2dee506402fff08ab150ab664b7b2abc59b66c56
SHA512
bcd29cc13e2734a0577931d241d0a3e260be7ed6cd414b21882fa261db7719be08712b578420755b98ebe73a5b88f8da6be08a9178681f030ba8edcd2007dc6e
SSDEEP
1536:yl3E0TXxUOZvLCo+jHoC9OHpLUEB9vP4OppJCEKnsfqz1YUhGpTK7:E39NHLJ+jIYOHFtIOpp4ELiCUhg+7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f7062e3a422c214ffad42b46f23dbbc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ