Outt
Sett
Behavioral task
behavioral1
Sample
6f8408f1fff46560bf13346e132fef0c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6f8408f1fff46560bf13346e132fef0c_JaffaCakes118
Size
70KB
MD5
6f8408f1fff46560bf13346e132fef0c
SHA1
d156ed7b323b908f4cd518e957bbfbba3cb9b7cf
SHA256
2722ce359f0e1870b63380dadce72d868fb31c51c6fe409f390a0f4db88e5a3f
SHA512
5016b4485cbb439c7fa0d54f15fc175cad80d7fdb0226e8492cc0d6d5c92d67b2c1afffe2e02ddbecdc2bdae367edcc2a25680c8808ab500df708342af83a1de
SSDEEP
1536:V2bRT3CXDcHGeNvoMcFNen4H6eTtp/8h+KnZkH9QiEp6:WR2XDcHNNA+4H6Qtp/KaH9QiI6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f8408f1fff46560bf13346e132fef0c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ