Outt
Sett
Behavioral task
behavioral1
Sample
6fd7f2cf1b6caabc5d07f7917444051a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6fd7f2cf1b6caabc5d07f7917444051a_JaffaCakes118
Size
70KB
MD5
6fd7f2cf1b6caabc5d07f7917444051a
SHA1
5a730faccaaa94c6b4f1a477e2c25790b66ec512
SHA256
9e4692f43e3585e7e1309855af47c71beb555c06367019df9b1ebbcb45b8fdfe
SHA512
5a0e5d0999abc845cb53e0c5e29a76c5e15ef556652c0e2b9a76920ffe7a555a7931fa93c23d68a2a9af1071f0145b471753fdd7846f2a55aac6abd92ac9eb76
SSDEEP
1536:1zExMwCGQ2jI7A6XeV8nR3HcNqRczWg8W1SsnHt0Xut:1I+wCGv4A6XAE3HC1zWg5tn5t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fd7f2cf1b6caabc5d07f7917444051a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ