Outt
Sett
Behavioral task
behavioral1
Sample
6fd6eb7797de8d9d4b12141719a0a094_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6fd6eb7797de8d9d4b12141719a0a094_JaffaCakes118
Size
50KB
MD5
6fd6eb7797de8d9d4b12141719a0a094
SHA1
bccef7d08b63ae4650649f367ff39f969481c7c8
SHA256
9a6bab5f7d2260bc434fc9c809ffb3367542dd41af4bdc3674dca8f6bbee33c2
SHA512
28d55941239f845c34b2c1f9da43359d64c5baad51bd0dc6e392e17d7c464c7c47772849d07282625417ceb8ff40a396f23e0d59375395f7e6a73704fe3f35e4
SSDEEP
768:k/IJqVWMqeCFxtLzPcJ61lybFCLIYQ54w4AncVC4S6hTe8G9qs3:kjRUHvApz71loCX9J
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fd6eb7797de8d9d4b12141719a0a094_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ